CVE-2022-28703 in Lansweeperinformación

Resumen

por MITRE • 2022-12-15

A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Talos

Reservar

2022-06-09

Divulgación

2022-12-15

Moderación

aceptado

Artículo

VDB-215896

CPE

listo

EPSS

0.01120

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-28703
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-28703
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-28703/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!