CVE-2022-39813: XSS

Published Jan 27, 2023

Updated

Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/jsecuritycheck via the jusername parameter, or NMSCIWebGui/actloglineview.jsp via the name or actLine parameter. An attacker leveraging this vulnerability could inject arbitrary JavaScript. The payload would then be triggered every time an authenticated user browses the page containing it.

Affected Software

1 affected component

Italtel NetMatch-S CI=5.2.0-20211008

Event History

Jan 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2022-39813?

The severity of CVE-2022-39813 is considered high due to its potential for remote code execution via XSS attacks.

How do I fix CVE-2022-39813?

To fix CVE-2022-39813, update the Italtel NetMatch-S CI software to the latest version that addresses this vulnerability.

What are the potential risks associated with CVE-2022-39813?

The potential risks include unauthorized access to user data and the ability for attackers to execute arbitrary JavaScript in the context of authenticated users.

What versions of Italtel NetMatch-S CI are affected by CVE-2022-39813?

CVE-2022-39813 affects Italtel NetMatch-S CI version 5.2.0-20211008.

Can CVE-2022-39813 be exploited remotely?

Yes, CVE-2022-39813 can be exploited remotely, allowing attackers to execute XSS attacks from an external location.