CVE-2023-5986

published 2023-11-15

CVE-2023-5986: A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By…

Priority P4 24 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input
attackers can cause the software’s web application to redirect to the chosen domain after a
successful login is performed.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	ecostruxure_power_monitoring_expert	—	—
schneider-electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_operation_advanced_reporting_and_dashboards_module	—	—
schneider_electric	ecostruxure_power_operation_advanced_reporting_and_dashboards_module	—	—
schneider_electric	ecostruxure_power_scada_operation_advanced_reporting_and_dashboards_module	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-601