CVE-2023-5986

published 2023-11-15

CVE-2023-5986: A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input
attackers can cause the software’s web application to redirect to the chosen domain after a
successful login is performed.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	ecostruxure_power_monitoring_expert	—	—
schneider-electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_operation_advanced_reporting_and_dashboards_module	—	—
schneider_electric	ecostruxure_power_operation_advanced_reporting_and_dashboards_module	—	—
schneider_electric	ecostruxure_power_scada_operation_advanced_reporting_and_dashboards_module	—	—

CWE-601