Lucene search

PRIOn knowledge basePRION:CVE-2022-38114

HistoryNov 23, 2022 - 5:15 p.m.

Cross site scripting

2022-11-2317:15:00

PRIOn knowledge base

www.prio-n.com

web server

content-length

post requests

http request smuggling

xss

nvd

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

This vulnerability occurs when a web server fails to correctly process the Content-Length of POST requests. This can lead to HTTP request smuggling or XSS.

CPENameOperatorVersion
security_event_managerlt2022.4

CPE	Name	Operator	Version
	security_event_manager	lt	2022.4

References

documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm

www.solarwinds.com/trust-center/security-advisories/CVE-2022-38114