cve/2024/CVE-2024-23786.md
2024-05-25 21:48:12 +02:00

889 B

CVE-2024-23786

Description

Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the management page of the affected product.

POC

Reference

No PoCs from references.

Github