HIGH🇵🇱 Wersja polska

CVE-2024-47801

CVSS 7.4v3.1pub. 2024-10-25upd. 2024-11-05

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

  • Sharp Bp 30c25

    HW
    Sharp
    all versions

  • Sharp Bp 30c25 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 30c25t

    HW
    Sharp
    all versions

  • Sharp Bp 30c25t Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 30c25y

    HW
    Sharp
    all versions

  • Sharp Bp 30c25y Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 30c25z

    HW
    Sharp
    all versions

  • Sharp Bp 30c25z Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 50c26

    HW
    Sharp
    all versions

  • Sharp Bp 50c26 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 50c31

    HW
    Sharp
    all versions

  • Sharp Bp 50c31 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 50c36

    HW
    Sharp
    all versions

  • Sharp Bp 50c36 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 50c45

    HW
    Sharp
    all versions

  • Sharp Bp 50c45 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 50c55

    HW
    Sharp
    all versions

  • Sharp Bp 50c55 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 50c65

    HW
    Sharp
    all versions

  • Sharp Bp 50c65 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 55c26

    HW
    Sharp
    all versions

  • Sharp Bp 55c26 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 60c31

    HW
    Sharp
    all versions

  • Sharp Bp 60c31 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 60c36

    HW
    Sharp
    all versions

  • Sharp Bp 60c36 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 60c45

    HW
    Sharp
    all versions

  • Sharp Bp 60c45 Firmware

    OS
    Sharp
    all versions

  • Sharp Bp 70c31

    HW
    Sharp
    all versions

  • Sharp Bp 70c31 Firmware

    OS
    Sharp
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2024-47406CRITICAL9.1PL ✓same product

Pominięcie uwierzytelnienia w urządzeniach MFP Sharp i Toshiba Tec

CVE-2022-45796CRITICAL9.1PL ✓same product

Command injection w SHARP MFP — zdalne wykonanie poleceń przez nw_interface.html

CVE-2024-47549HIGH7.4same product

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination...

CVE-2024-42420HIGH7.5same product

Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of ...

CVE-2024-43424HIGH7.5same product

Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnera...