An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.
| Software | From | Fixed in |
|---|---|---|
| mbconnectline / mbconnect24 | - | 2.6.2.x |
| mbconnectline / mymbconnect24 | - | 2.6.2.x |