CVE-2022-38801

creationtimestamp| type| source ---|---|--- 2022-11-30 16:29:14+00:00| seen| https://t.me/cibsecurity/53719...

CVE-2022-38801

In Zkteco BioTime 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting...

CVE-2022-38801

In Zkteco BioTime 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting...

CVE-2022-38801

The CVE-2022-38801 entry affects Zkteco BioTime prior to 8.5.3 Build:20200816.447, where an employee can hijack an administrator session and cookies via blind cross-site scripting. The vulnerability is caused by a cross-site scripting flaw in BioTime, enabling session takeover and cookie access. ...