PT-2022-18778
CVE-2022-28051
·
تاريخ النشر
2022-06-06
·
تاريخ التحديث
2022-06-13
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SeedDMS versions 5.1.25 through 6.0.18
Description
The issue affects the "Add category" functionality inside the "Global Keywords" menu, allowing an attacker to inject malicious javascript code through stored XSS.
Recommendations
For versions 5.1.25 through 6.0.18, consider disabling the "Add category" functionality until a patch is available to prevent exploitation.
Restrict access to the "Global Keywords" menu to minimize the risk of stored XSS attacks.
Avoid using the "Add category" feature in the affected versions until the issue is resolved.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾