CVE-2024-5624 — Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL

CVE-2024-5624

Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL PUBLISHED

Description (CNA)

Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session

Affected (CNA)

Vendor / product	Versions
B&R Industrial Automation / B&R APROL	affected 0 through <= R 4.4-00P3

CWE

CWE-79

References

https://www.br-automation.com/fileadmin/SA24P2014_Multiple_vulnerabilities_in_BR_APROL.pdf-367290ae.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.