CVE-2022-26494

An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1

published March 21, 2022

CVSS
—
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00653 · 50.7th percentile
Published
2022-03-21T14:24Z
EPSS history
Timeline
  • 21 MAR 14:24Z
    An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1
    cvelistv5