Description
Uniview NVR301-04S2-P4存在跨站脚本漏洞，此漏洞是由于Login接口对用户的请求验证不当导致的。
Uniview NVR301-04S2-P4 CVE-2024-3850 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-3850
https://cn.uniview.com/Security/Notice/202406/819981_197700_0.htm
https://github.com/advisories/GHSA-r4pf-fm74-w9rw
https://www.runzero.com/blog/uniview-nvr301-04s2-p4/
https://pentest-tools.com/vulnerabilities-exploits/uniview-nvr301-04s2-p4-cross-site-scripting_23072
https://app.opencve.io/cve/CVE-2024-3850
https://www.cctvcalculator.net/en/knowledges/vulnerability-database/
https://www.cisa.gov/news-events/bulletins/sb24-169
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-3850