PT-2022-24386 · Unknown · Eyesofnetwork

Derrie Sutton · Published 2022-08-15 · Updated 2022-08-17 · CVE-2022-38358

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Eyes of Network (affected versions not specified)

Description The issue is related to improper neutralization of input during web page generation, making the Eyes of Network web application susceptible to cross-site scripting attacks. This can occur at specific API endpoints such as "/module/admin notifiers/rules.php" and "/module/report event/indext.php" via the parameters rule notification, rule name, and rule name old, and at "/module/admin user/add modify user.php" via the parameters user name and user email.

Recommendations For Eyes of Network, as a temporary workaround, consider restricting access to the vulnerable API endpoints "/module/admin notifiers/rules.php", "/module/report event/indext.php", and "/module/admin user/add modify user.php" to minimize the risk of exploitation. Avoid using the parameters rule notification, rule name, rule name old, user name, and user email in these endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-38358

Affected Products

Eyesofnetwork

References · 3

• 🔥 https://tenable.com/security/research/tra-2022-29 · Exploit
• https://osv.dev/vulnerability/CVE-2022-38358 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38358 · Security Note