CVE-2023-46483

2023-11-0800:00:00

mitre

www.cve.org

cross site scripting

timetec awdms

new zone function

sensitive information

crafted payload

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function.

References

github.com/fengniange/TimeTec_Cloud_AWDMS/