PT-2022-17178

Name of the Vulnerable Software and Affected Versions SAS Web Report Studio version 4.4 Description SAS Web Report Studio allows cross-site scripting XSS. The "/SASWebReportStudio/logonAndRender.do" endpoint has two parameters: saspfs request backlabel list and saspfs request backurl list. The...