CVE-2022-42954

Keyfactor EJBCA before 7.10.0 allows XSS...

PT-2022-26678 · Keyfactor · Keyfactor Ejbca

Name of the Vulnerable Software and Affected Versions: Keyfactor EJBCA versions prior to 7.10.0 Description: The issue allows for Cross-Site Scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take...

CVE-2022-42954: Improper Neutralization of Input During Web Page Generation

Keyfactor EJBCA before 7.10.0 allows XSS...

CVE-2022-42954

Keyfactor EJBCA before 7.10.0 is affected by a cross-site scripting (XSS) vulnerability. The issue is cited across multiple sources (NVD/Red Hat/CVE records) with the affected product identified as Keyfactor EJBCA versions prior to 7.10.0. The underlying cause is an XSS flaw in the web interface ...