CVE-2021-23856: Reflected Cross-Site-Scripting
Published Oct 4, 2021
·Updated
The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL.
Affected Software
4 affected components
Bosch Rexroth Indramotion Mlc L20 Firmware
Bosch Rexroth Indramotion Mlc L20
Bosch Rexroth Indramotion Mlc L40 Firmware
Bosch Rexroth Indramotion Mlc L40
Event History
Oct 4, 2021
CVE Published
via MITRE·05:32 PM
Data Sourced
via MITRE·05:32 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-23856?
The severity of CVE-2021-23856 is critical.
2
How does CVE-2021-23856 affect Bosch Rexroth Indramotion Mlc L20 Firmware?
Bosch Rexroth Indramotion Mlc L20 Firmware is affected by CVE-2021-23856.
3
How can an attacker exploit CVE-2021-23856?
An attacker can exploit CVE-2021-23856 by sending a manipulated URL to the client.
4
Is Bosch Rexroth Indramotion Mlc L40 vulnerable to CVE-2021-23856?
No, Bosch Rexroth Indramotion Mlc L40 is not vulnerable to CVE-2021-23856.
5
Where can I find more information about CVE-2021-23856?
More information about CVE-2021-23856 can be found at https://psirt.bosch.com/security-advisories/bosch-sa-741752.html.