CVE-2022-21145 in LansweeperИнформация

Сводка

по MITRE • 15.04.2022

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

Talos

Резервировать

10.01.2022

Раскрытие

15.04.2022

Модерация

принято

Вход

VDB-197413

EPSS

0.77778

KEV

Нет

Деятельности

Очень низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-21145
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-21145
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-21145/

◂ ПредыдущийОбзорДалее ▸

Do you know our Splunk app?

Download it now for free!