CVE-2022-21145 in Lansweeperinformación

Resumen

por MITRE • 2022-04-15

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Talos

Reservar

2022-01-10

Divulgación

2022-04-15

Moderación

aceptado

Artículo

VDB-197413

CPE

listo

EPSS

0.77778

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-21145
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-21145
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-21145/

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!