CVE-2013-3572 Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML...
MediumCVSS 6.1
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted client hostname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ui unifi controller | < 2.3.6 | 2.3.6 |
References
- dl.ubnt.com vendor-advisory
- spaceblogs.org broken-link url-repurposed
- 64601 broken-link third-party-advisory vdb-entry
- community.ubnt.com vendor-advisory