PT-2022-13870

CVE-2022-1414

·

تاريخ النشر

2022-10-19

·

تاريخ التحديث

2025-05-09

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions 3scale API Management 2
Description The issue arises from inadequate sanitation of user input in multiple fields, allowing an authenticated user to inject scripts. This could potentially lead to access to sensitive information or further attacks.
Recommendations For 3scale API Management 2, ensure proper sanitation of user input in all fields to prevent script injection. As a temporary workaround, consider restricting access to sensitive information and monitoring for suspicious activity until a more permanent solution is implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾