CVE:CVE-2017-9390
CNNVD:CNNVD-201706-118
Vera VeraEdge 1.7.19版本和Veralite 1.7.481版本中存在安全漏洞，该漏洞源于程序没有对‘RedirectURL’参数执行严格的输入验证。攻击者可利用该漏洞在应用程序上执行客户端脚本。
solution:Upgrade getvera veraedge_firmware to a higher version than 1.7.19,and avoid the version (,1.7.19]; Upgrade getvera veralite_firmware to a higher version than 1.7.481,and avoid the version (,1.7.481]