CVE-2022-43670
XSS in Sling CMS Reference App Taxonomy Path
概要
XSS in Sling CMS Reference App Taxonomy Path
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may allow an authenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the taxonomy management feature.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com