PT-2022-13870

CVE-2022-1414

·

Published

2022-10-19

·

Updated

2025-05-09

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions 3scale API Management 2
Description The issue arises from inadequate sanitation of user input in multiple fields, allowing an authenticated user to inject scripts. This could potentially lead to access to sensitive information or further attacks.
Recommendations For 3scale API Management 2, ensure proper sanitation of user input in all fields to prevent script injection. As a temporary workaround, consider restricting access to sensitive information and monitoring for suspicious activity until a more permanent solution is implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾