medium5.8
CVE-2022-40183
An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface.
Impact
An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Videojet Multi 4000 Firmware | through 6.31.0010 |