PT-2022-10350
CVE-2021-3442
·
Published
2022-08-22
·
Updated
2023-02-12
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Red Hat OpenShift API Management (affected versions not specified)
Description
A flaw in the product allows an authenticated user to inject scripts into some text boxes due to lack of user input validation, leading to a cross-site scripting (XSS) attack. The primary threat from this issue is to data confidentiality.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾