CVE-2024-8528 — ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter

CVE-2024-8528

ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter PUBLISHED

Description (CNA)

Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.

Affected (CNA)

Vendor / product	Versions
Automated Logic / WebCtrl	affected 6.0 through 9.0
Carrier / i-Vu	affected 6.0 through 9.0

CWE

CWE-79

References

https://www.corporate.carrier.com/product-security/advisories-resources/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.