CVE-2022-36783 in FireFlowinformação

Sumário

de MITRE • 25/10/2022

AlgoSec FireFlow Reflected Cross-Site-Scripting (RXSS): A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

26/07/2022

Divulgação

25/10/2022

Moderação

aceite

Entrada

VDB-212287

CPE

pronto

EPSS

0.00364

KEV

não

Atividades

muito baixo

Fontes

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!