CVE-2022-1414

2022-10-1900:00:00

CWE-1173

redhat

www.cve.org

3scale

api management

input sanitization

script injection

unauthorized access

cve-2022-1414

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

38.2%

JSON

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "3scale-amp-system",
    "versions": [
      {
        "version": "3scale-amp-system as shipped in 3scale-AMP 2",
        "status": "affected"
      }
    ]
  }
]