PT-2022-25008 · Wso2 · Wso2 Enterprise Integrator

Massimiliano Brolli + 1 · CVE-2022-39810 · Published 2022-09-09 · Updated 2022-09-14

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WSO2 Enterprise Integrator version 6.4.0

Description A Reflected Cross-Site Scripting (XSS) issue has been identified in the Management Console under "/carbon/ndatasource/validateconnection/ajaxprocessor.jsp" via the driver parameter. This could lead to session hijacking or similar attacks, although it is noted that such attacks would not be possible in this case.

Recommendations For WSO2 Enterprise Integrator version 6.4.0, consider disabling access to the "/carbon/ndatasource/validateconnection/ajaxprocessor.jsp" endpoint or restricting the use of the driver parameter until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-39810

Affected Products

Wso2 Enterprise Integrator

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39810.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-39810 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39810 · Vendor Advisory
• https://t.me/cibsecurity/49551 · Telegram Post
• https://t.me/cvenotify/36154 · Telegram Post
• https://gruppotim.it/it/footer/red-team.html · Note