Beveiligingsadvies

CVE-2022-23058

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-22 07:30:21

Laatst bijgewerkt 2024-09-16 17:37:58

Toegewezen door Mend

CVSS-score geen score

Status PUBLISHED

Beschrijving

ERPNext in versions v12.0.9-v13.0.3 are affected by a stored XSS vulnerability that allows low privileged users to store malicious scripts in the ‘username’ field in ‘my settings’ which can lead to full account takeover.

← Alle CVE's bekijken Bekijk op cve.org ↗