CVE-2022-47870

Name of the Vulnerable Software and Affected Versions Redgate SQL Monitor version 12.1.31.893

Description A Cross Site Scripting (XSS) issue in the web SQL monitor login page allows remote attackers to inject arbitrary web script or HTML via the returnUrl parameter. This enables attackers to potentially execute malicious code on the client-side.

Recommendations For Redgate SQL Monitor version 12.1.31.893, consider restricting access to the web SQL monitor login page until a patch is available. As a temporary workaround, avoid using the returnUrl parameter in the affected login page to minimize the risk of exploitation.