PT-2022-13870
CVE-2022-1414
·
تاريخ النشر
2022-10-19
·
تاريخ التحديث
2025-05-09
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
3scale API Management 2
Description
The issue arises from inadequate sanitation of user input in multiple fields, allowing an authenticated user to inject scripts. This could potentially lead to access to sensitive information or further attacks.
Recommendations
For 3scale API Management 2, ensure proper sanitation of user input in all fields to prevent script injection.
As a temporary workaround, consider restricting access to sensitive information and monitoring for suspicious activity until a more permanent solution is implemented.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾