CVE-2022-38192: There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.
A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS may allow a remote, authenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-38192?
CVE-2022-38192 is a stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS.
How does CVE-2022-38192 affect Esri Portal for ArcGIS?
CVE-2022-38192 allows a remote, authenticated attacker to pass and store malicious strings in crafted queries, which could potentially execute arbitrary JavaScript code in the user's browser.
What is the severity level of CVE-2022-38192?
CVE-2022-38192 has a severity level of medium (5.4).
How can I fix CVE-2022-38192 in Esri Portal for ArcGIS?
To fix CVE-2022-38192, apply the security update provided by Esri. More details can be found in the reference link.
Where can I find more information about CVE-2022-38192?
You can find more information about CVE-2022-38192 in the reference link provided.