CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

Sas Institute Sas Web Report Studio Cross-Site Script Vulnerabilities

Sas Institute Sas Web Report Studio is a web application from Sas Institute, Inc. It is used to view, interact with, create, and distribute public and private reports. A cross-site scripting vulnerability exists in Sas Institute Sas Web Report Studio, which stems from Do having two parameters:...

PT-2022-17178

Name of the Vulnerable Software and Affected Versions SAS Web Report Studio version 4.4 Description SAS Web Report Studio allows cross-site scripting XSS. The "/SASWebReportStudio/logonAndRender.do" endpoint has two parameters: saspfs request backlabel list and saspfs request backurl list. The...