CVE-2022-24692

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5

published July 18, 2022

CVSS
—
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the general Parameters page is vulnerable to stored XSS. The attacker can create a menu option, make it visible to every application user, and conduct session hijacking, account takeover, or malicious code delivery, with the final goal of achieving client-side code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00668 · 51.3th percentile
Published
2022-07-18T12:34Z
EPSS history
Timeline
  • 18 JUL 12:34Z
    An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5
    cvelistv5