Beveiligingsadvies

CVE-2022-22123

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-01-13 16:45:14
Laatst bijgewerkt 2024-09-17 01:51:59
Toegewezen door Mend
CVSS-score 5.4
Status PUBLISHED

Beschrijving

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server.