CVE-2024-47549CWE-644

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers

High · published October 25, 2024

CVSS v3.1
7.4
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers.

Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Weakness
CWE-644 · Improper Neutralization of HTTP Headers for Scripting Syntax
Published
2024-10-25T06:18Z
EPSS history
Timeline
  • 25 OCT 06:18Z
    Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers
    cvelistv5