PT-2022-27796 · Siemens · Polarion Alm
CVE-2022-46265
·
Published
2022-12-13
·
Updated
2023-05-16
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Polarion ALM versions prior to V2304.0
Description
A Host header injection issue has been identified, which could allow an attacker to spoof Host header information and redirect users to malicious websites.
Recommendations
For versions prior to V2304.0, update to version V2304.0 or later to resolve the issue.
Fix
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Polarion Alm