CVE-2022-21145 in Lansweeper信息

摘要

由 MITRE • 2022-04-15

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Talos

预定

2022-01-10

披露

2022-04-15

管理

已接受

条目

VDB-197413

CPE

准备好

CWE

CWE-80 (已确认)

CVSS

9.1 (CNA)

EPSS

0.77778

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-21145
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-21145
CVE Details	https://www.cvedetails.com/cve/CVE-2022-21145/

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!