PT-2022-17421 · Symantec · Messaging Gateway

Abdullah Alomair + 1 · Published 2022-12-09 · Updated 2023-03-01 · CVE-2022-25629

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue allows an authenticated user with the privilege to add or edit annotations on the Content tab to craft a malicious annotation. This malicious annotation can be executed on the annotations page, specifically in the Annotation Text Column.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-25629

Affected Products

Messaging Gateway

References · 4

• https://osv.dev/vulnerability/CVE-2022-25629 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25629 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21115 · Vendor Advisory
• https://t.me/cibsecurity/54242 · Telegram Post