In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application.
References
Link | Resource |
---|---|
http://teradici.com | Vendor Advisory |
https://gist.github.com/rvismit/578f9f98d79f22d81a5e45dbbc0b4fa4 | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-07-07 07:15
Updated : 2021-07-09 11:23
NVD link : CVE-2021-35451
Mitre link : CVE-2021-35451
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
teradici
- pcoip_management_console