CVE-2022-38209

CVE-2022-38209 describes a reflected XSS in Esri Portal for ArcGIS, affecting versions 10.9.1 and below. An unauthenticated, remote attacker could craft a link that, when clicked, executes arbitrary JavaScript in the victim’s browser. The documented affected component is Esri Portal for ArcGIS; t...