CVE-2022-48111

Опубликовано: 10 мар. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

A cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400 between version 8 and 11 included allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the f parameter.

Ссылки

http://sipe.com
Broken Link
http://wi400.com
Product
https://devisions.github.io/blog/cve-2022-48111
Exploit
Third Party Advisory
https://labs.yarix.com/2023/02/siri-wi400-xss-on-login-page-cve-2022-48111/
Exploit
Third Party Advisory
https://labs.yarix.com/advisories/CVE-2022-48111/
Third Party Advisory
http://sipe.com
Broken Link
http://wi400.com
Product
https://devisions.github.io/blog/cve-2022-48111
Exploit
Third Party Advisory
https://labs.yarix.com/2023/02/siri-wi400-xss-on-login-page-cve-2022-48111/
Exploit
Third Party Advisory
https://labs.yarix.com/advisories/CVE-2022-48111/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:siri-informatica:wi400:*:*:*:*:*:*:*:*

Версия от 8.0 (включая) до 11.0 (включая)

EPSS

Процентиль: 34%

0.00132

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-2787-j4hr-mpvr