CVE-2022-40711

2023-01-0100:00:00

mitre

www.cve.org

primekey

ejbca

community

stored xss

end entity section

ra administrator

inject

payload

higher-privilege users

AI Score

Confidence

High

EPSS

0.001

Percentile

25.3%

JSON

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.

References

verneet.com/cve-2022-40711/