CVE-2022-21145 in Lansweeperinfo

Zusammenfassung

von MITRE • 15.04.2022

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

Talos

Reservieren

10.01.2022

Veröffentlichung

15.04.2022

Moderieren

akzeptiert

Eintrag

VDB-197413

CPE

bereit

EPSS

0.77778

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-21145
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-21145
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-21145/

◂ ZurückÜbersichtWeiter ▸

Do you need the next level of professionalism?

Upgrade your account now!