CVE-2022-39172

A stored XSS in the process overview bersicht zugewiesener Vorgaenge in mbsupport openVIVA c2 20220101 allows a remote, authenticated, low-privileged attacker to execute arbitrary code in the victim's browser via name field of a process...

CVE-2022-39172

CVE-2022-39172 affects mbS upport openVIVA c2 (version 20220101). The vulnerability is a stored XSS in the process overview (name field of a process) that can let a remote, authenticated, low-privileged attacker execute arbitrary browser code. References indicate the issue was fixed in a later re...

openVIVA c2 20220101 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Stored Cross-Site Scripting product: mb Support broker management solution openVIVA c2 vulnerable version: 20220801 CVE number: CVE-2022-39172 impact: Medium homepage:...