CVE-2022-26494

Publication date

2022-03-21 14:24:03

Family

mitre

State

PUBLISHED

Description

An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name.