CVE-2023-38551: Improper Neutralization of CRLF Sequences

A CRLF Injection vulnerability in Ivanti Connect Secure 9.x, 22.x allows an authenticated high-privileged user to inject malicious code on a victim’s browser, thereby leading to cross-site scripting attack...

PT-2022-15534

Name of the Vulnerable Software and Affected Versions Incapptic Connect affected versions not specified Description The issue allows an authenticated high privileged user to perform a stored XSS attack due to incorrect output encoding in Incapptic Connect. Recommendations At the moment, there is ...