CVE-2022-29597

CVE-2022-29597: Local File Inclusion in RSS v500 The RRS v500 application by Solutions Atlantic is vulnerable to a Local File Inclusion LFI vulnerability. Any authenticated user has the ability to reference internal system files within requests made to the...

CVE-2022-29597

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...

CVE-2022-29597: Improper Limitation of a Pathname to a Restricted Directory

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...

PT-2022-19717

Name of the Vulnerable Software and Affected Versions Solutions Atlantic Regulatory Reporting System RRS version v500 Description The issue allows any authenticated user to reference internal system files within requests made to the "RRSWeb/maint/ShowDocument/ShowDocument.aspx" page. The server...

PT-2022-19718

Name of the Vulnerable Software and Affected Versions Solutions Atlantic Regulatory Reporting System RRS version v500 Description The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited via the "RRSWeb/maint/ShowDocument/ShowDocument.aspx" API endpoint. Recommendation...

CVE-2022-29598: Improper Neutralization of Input During Web Page Generation

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...