CVE-2022-37462

CVE-2022-37462 describes a stored XSS in the Chat gadget of Upstream Works Agent Desktop for Cisco Finesse via the AttachmentId in file-upload details. Affected: Upstream Works Agent Desktop for Cisco Finesse versions 4.2.12 and earlier, and 5.0. Root cause: insecure handling of AttachmentId in f...