PT-2022-26820 · Inhabit Systems Pty · Move Crm

Published 2022-12-22 · Updated 2022-12-29 · CVE-2022-43271

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Inhabit Systems Pty Ltd Move CRM version 4, build 260

Description A cross-site scripting (XSS) issue was found in the User profile component. This allows for potential malicious script execution.

Recommendations For Inhabit Systems Pty Ltd Move CRM version 4, build 260, consider disabling the User profile component until a patch is available to prevent potential exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-43271

Affected Products

Move Crm

References · 5

• 🔥 https://github.com/SecurityWillCheck/CVE-2022-43271 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-43271 · Security Note
• https://inhabit.com.au/CVE-2022-43271 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-43271 · Vendor Advisory
• https://t.me/cvenotify/40401 · Telegram Post