CVE-2022-43014

Name of the Vulnerable Software and Affected Versions OpenCATS version 0.9.6

Description The issue is related to a reflected cross-site scripting (XSS) vulnerability. This vulnerability can be exploited via the joborderID parameter, potentially allowing a remote attacker to conduct cross-site scripting attacks. The vulnerability is associated with the lack of protection measures for the web page structure in the OpenCATS recruitment process management system.

Recommendations For OpenCATS version 0.9.6, consider restricting access to the joborderID parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the joborderID parameter in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.