1. Home
  2. CVE Database
  3. CVE-2024-48870
MEDIUM · 6.2

CVE-2024-48870

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, mal...

Vulnerability Description

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.

CVSS Score

6.2

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ToshibatecE-Studio1058 Firmware<= t1.01.h4.00
ToshibatecE-Studio1058-
ToshibatecE-Studio1208 Firmware<= t1.01.h4.00
ToshibatecE-Studio1208-
ToshibatecE-Studio908 Firmware<= t2.12.h3.00
ToshibatecE-Studio908-
SharpBp-90C70 Firmware-
SharpBp-90C70-
SharpBp-90C80 Firmware-
SharpBp-90C80-
SharpBp-70C65 Firmware-
SharpBp-70C65-
SharpBp-70C55 Firmware-
SharpBp-70C55-
SharpBp-70C45 Firmware-
SharpBp-70C45-
SharpBp-70C36 Firmware-
SharpBp-70C36-
SharpBp-70C31 Firmware-
SharpBp-70C31-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2024-48870?

CVE-2024-48870 is a vulnerability with a CVSS score of 6.2 (MEDIUM). Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, mal...

How severe is CVE-2024-48870?

CVE-2024-48870 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-48870?

Check the references section above for vendor advisories and patch information. Affected products include: Toshibatec E-Studio1058 Firmware, Toshibatec E-Studio1058, Toshibatec E-Studio1208 Firmware, Toshibatec E-Studio1208, Toshibatec E-Studio908 Firmware.