CVE-2022-45472

CVE-2022-45472 DOMベースXSS ソフトウェア: CAE Learning Space Enterprise with Intuity License イメージバージョン: 267r パッチレベル: 639 脆弱性: DOMベースXSS 説明 CAE Learning Space Enterprise 管理ソフトウェアは、DOMベースXSS攻撃に対して脆弱です。DOMベースXSS攻撃とは、ユーザーが実行可能なペイロードをホストに送信し、その結果として、元のクライアントサイドスクリプトから被害者のブラウザ内のDOM環境を変更する攻撃です。この攻撃は、Burp...

EUVD-2022-48338

Malicious code in bioql PyPI...

CVE-2022-45472

CAE LearningSpace Enterprise with Intuity License image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup...

CVE-2022-45472

CAE LearningSpace Enterprise with Intuity License image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup...

Design/Logic Flaw

CAE LearningSpace Enterprise with Intuity License image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup...

CVE-2022-45472

CAE LearningSpace Enterprise with Intuity License image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup...

CVE-2022-45472: Improper Neutralization of Input During Web Page Generation

CAE LearningSpace Enterprise with Intuity License image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup...

CVE-2022-45472

CVE-2022-45472 affects CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639. The vulnerability is DOM-based XSS triggered by ontouchmove and onpointerup, allowing injection of script and potential UI/data impact. Root cause relates to insufficient input filtering/escaping of u...

PT-2022-27528 · Cae · Cae Learningspace Enterprise

Name of the Vulnerable Software and Affected Versions: CAE LearningSpace Enterprise with Intuity License image 267r patch 639 Description: The issue is related to DOM XSS and is associated with the ontouchmove and onpointerup events. There is no information provided about the estimated number of...