CVE-2022-44038

The CVE-2022-44038 entry concerns Russound XSourcePlayer 777D, version 06.08.03, with a vulnerability in the scriptRunner.cgi component. Root cause: failure to properly filter certain elements in constructed snippets, enabling remote code execution. Impact: high across confidentiality, integrity,...