Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.
Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
For more information, please contact Elcomplus support.
Configurations
Workarounds
Exploits
Credits
Michael Heinzl reported these vulnerabilities to CISA
Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.