| Package | Affected versions | Patched versions |
|---|---|---|
| automation runtime | < i4.93 | i4.93 |
A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime versions <= G4.93 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free