PT-2022-16693

CVE-2022-24432

·

Published

2022-03-09

·

Updated

2022-03-16

Description by

CVSS 3.1
5.5
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions ipDIO (affected versions not specified)
Description The issue allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into specific fields in the web interface. This payload will be executed when a legitimate user attempts to upload, copy, download, or delete an existing configuration, specifically within Administrative Services.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2022-24432
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com