high7.4
CVE-2024-47801
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability.
Impact
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toshibatec | E-Studio1058 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio1208 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio908 Firmware | through t2.12.h3.00 |
| Sharp | Bp-90c70 Firmware | All versions |
| Sharp | Bp-90c80 Firmware | All versions |
| Sharp | Bp-70c65 Firmware | All versions |
| Sharp | Bp-70c55 Firmware | All versions |
| Sharp | Bp-70c45 Firmware | All versions |
| Sharp | Bp-70c36 Firmware | All versions |
| Sharp | Bp-70c31 Firmware | All versions |
| Sharp | Bp-60c45 Firmware | All versions |
| Sharp | Bp-60c36 Firmware | All versions |