CVE-2022-21238 in InRouter302

Riassunto

di MITRE • 12/05/2022

A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: Talos
• Prenotare: 22/02/2022
• Divulgazione: 12/05/2022
• Moderazione: accettato
• Voce: VDB-199809
• CPE: pronto
• CWE: CWE-80 (confermato)
• CVSS: 5.4 (CNA)
• EPSS: 0.01392
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Pharma, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-21238
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-21238
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-21238/