CVE-2013-3572

No fix known EPSS 2%

Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted client hostname.

Published 2013-12-31 · CVE record · OSV

Products: ui unifi_controller