PT-2022-5013
CVE-2022-3442
·
تاريخ النشر
2022-10-10
·
تاريخ التحديث
2022-10-11
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Crealogix EBICS version 7.0
Description
A vulnerability was found in the /ebics-server/ebics.aspx component of Crealogix EBICS, which can be exploited to conduct a cross-site scripting (XSS) attack. The attack may be launched remotely. The issue arises due to inadequate protection of the web page structure.
Recommendations
For Crealogix EBICS version 7.0, upgrade to version 7.1 to address this issue. As a temporary workaround, consider restricting access to the /ebics-server/ebics.aspx endpoint until the upgrade is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾