Global
BrightSign diagnostic web server has an unauthenticated server-side request forgery flaw
NVD published a server-side request forgery flaw in BrightSign players. In the BrightSign Digital Signage Diagnostic Web Server 8.2.26 and earlier, the Download Speed Test service can be abused without logging in through the 'url' GET parameter.
- Type
- Vulnerability
- Sector
- Vendor
- Country
- Global
