CVE-2022-28703 in LansweeperИнформация

Сводка

по MITRE • 15.12.2022

A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

Talos

Резервировать

09.06.2022

Раскрытие

15.12.2022

Модерация

принято

Вход

VDB-215896

EPSS

0.01120

KEV

Нет

Деятельности

Очень низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-28703
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-28703
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-28703/

◂ ПредыдущийОбзорДалее ▸

Do you need the next level of professionalism?

Upgrade your account now!