Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting (XSS) vulnerability via the rule_name parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21639
Reference (s):
- https://github.com/Sm1L3ing/ACSEC/blob/master/Ruijie-RG-UAC