ETIC Telecom Remote Access Server Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in all versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0. The issue arises in the 'get view' method, specifically under the 'view' parameter. This vulnerability allows attackers to inject malicious scripts that are then executed in the context of the user's browser. The ETIC RAS web server generates dynamic pages that incorporate client-side input, which is reflected back to the client, creating an opportunity for XSS attacks.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.