CVE-2019-12167 – Emerson Network Power Liebert Challenger 5.1E0.5 Cross Site Scripting

https://notcve.org/view.php?id=CVE-2019-12167

httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter. httpGetSet / httpGet.htm en Emerson Network Power los dispositivos Liebert Challenger 5.1E0.5 permiten XSS mediante el parámetro statusstr. Emerson Network Power Liebert Challenger version 5.1E0.5 suffers from a cross site scripting vulnerability. • http://www.securityfocus.com/bid/108420 https://seclists.org/bugtraq/2019/May/51 https://www.emerson.com/en-us/support • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •