exploitDog

CVE-2022-23790

Опубликовано: 14 мар. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting (XSS).This issue affects Customer Relation Manager: before 2022.03.13.

Ссылки

https://www.usom.gov.tr/bildirim/tr-23-0145
Third Party Advisory
US Government Resource
https://www.usom.gov.tr/bildirim/tr-23-0145
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:firmanet:technology_customer_relation_manager:*:*:*:*:*:*:*:*

Версия до 2022.03.13 (исключая)

EPSS

Процентиль: 38%

0.00167

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-x32w-rcqv-cv63

CVSS3: 6.1

github

почти 3 года назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting (XSS).This issue affects Customer Relation Manager: before 2022.03.13.

EPSS

Процентиль: 38%

0.00167

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79