PT-2022-23711 · Solarwinds · Solarwinds Platform
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SolarWinds Platform versions prior to 2022.3.0
Description
The issue is related to insufficient sanitization of inputs in the QoE application input field, which could lead to stored and DOM-based XSS attacks.
Recommendations
For versions prior to 2022.3.0, update to SolarWinds Platform version 2022.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the QoE application input field to minimize the risk of exploitation.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Solarwinds Platform