OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parameter.
References
Link | Resource |
---|---|
https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_joborderID.md | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-10-19 11:15
Updated : 2022-10-19 22:46
NVD link : CVE-2022-43014
Mitre link : CVE-2022-43014
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
opencats
- opencats