medium5.4
CVE-2023-40143
An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site sc…
Impact
An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "forward.0.domain" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Westermo | L206-F2g Firmware | Version 4.24 |