Security Advisory

CVE-2022-39024

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-10-31 06:40:36
Last updated 2025-05-06 15:39:04
Assigner twcert
State PUBLISHED

Description

U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.