PT-2023-14695 · Unknown · B2B Customer Ordering System

Alican Ozdemir · Publicado 2023-01-24 · Atualizado 2024-02-01 · CVE-2022-4554

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions B2B Customer Ordering System versions prior to 1.0.0.347

Description The issue is an authenticated Reflected XSS vulnerability. This vulnerability has been fixed in version 1.0.0.347.

Recommendations For versions prior to 1.0.0.347, update to version 1.0.0.347 to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable components until the update can be applied.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2022-4554

Produtos afetados

B2B Customer Ordering System

Referências · 7

• https://t.me/cvenotify/48391 · Publicação no Telegram
• https://t.me/cvenotify/43189 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-4554 · Nota de Segurança
• https://t.me/cvenotify/42713 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-4554 · Aviso do Fabricante
• https://usom.gov.tr/bildirim/tr-23-0022 · Nota
• https://t.me/cvenotify/69580 · Publicação no Telegram