CVE-2024-47549

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

Score
CVSS 3.1 7.4 High
Status
Analyzed - vultures@jpcert.or.jp
Published
2024-10-25
Last modified
2024-10-25
Weaknesses
CWE-116, CWE-644

Affected products

References

 
 
© AVABIS GmbH privacypolicy about