CVE-2023-3971
Controller: html injection in custom login info
An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.
CVSS 3.1 · 7.3 High
EPSS < 1%
KEV · Not listed
Vendors
Products