Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/06 12:00 a.m.•2 views

CVE-2022-44875: Improper Neutralization of Input During Web Page Generation

KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...

5.4CVSS5.9AI score0.00572EPSS
SaveExploits1References3
Rows per page
Query Builder