NetSight
IP …
high8.2

CVE-2023-5986

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack.

Impact

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application to redirect to the chosen domain after a successful login is performed.

Affected products

VendorProductAffected versions
Schneider-ElectricEcostruxure Power Monitoring Expert
Versions 2020, 2021

Weakness classification

CWE-601

References