CVE-2022-28703 in Lansweeperinformação

Sumário

de MITRE • 15/12/2022

A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

Talos

Reservar

09/06/2022

Divulgação

15/12/2022

Moderação

aceite

Entrada

VDB-215896

CPE

pronto

EPSS

0.01120

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-28703
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-28703
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-28703/

◂ VoltarVisão GeralPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!