PT-2022-12935
CVE-2021-46827
·
تاريخ النشر
2022-07-13
·
تاريخ التحديث
2022-07-20
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Oxygen XML WebHelp versions prior to 22.1 build 2021082006
Oxygen XML WebHelp versions 23.x prior to 23.1 build 2021090310
Description
An issue in Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field, due to an XSS vulnerability in search terms proposals. This affects online documentation generated using Oxygen XML WebHelp.
Recommendations
For Oxygen XML WebHelp versions prior to 22.1 build 2021082006, update to version 22.1 build 2021082006 or later.
For Oxygen XML WebHelp versions 23.x prior to 23.1 build 2021090310, update to version 23.1 build 2021090310 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾