medium6.1
CVE-2023-40819
ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.
Impact
ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devlop.Systems | Id4portais | through 2022.837.002a |