PT-2023-14695 · Unknown · B2B Customer Ordering System

Alican Ozdemir · Published 2023-01-24 · Updated 2024-02-01 · CVE-2022-4554

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions B2B Customer Ordering System versions prior to 1.0.0.347

Description The issue is an authenticated Reflected XSS vulnerability. This vulnerability has been fixed in version 1.0.0.347.

Recommendations For versions prior to 1.0.0.347, update to version 1.0.0.347 to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable components until the update can be applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4554

Affected Products

B2B Customer Ordering System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-4554 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4554 · Vendor Advisory
• https://t.me/cvenotify/48391 · Telegram Post
• https://t.me/cvenotify/43189 · Telegram Post
• https://t.me/cvenotify/42713 · Telegram Post
• https://usom.gov.tr/bildirim/tr-23-0022 · Note
• https://t.me/cvenotify/69580 · Telegram Post