CVE-2022-37317

Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability

High · published August 25, 2022

CVSS v3.1
7.6
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious code in the context of the web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:L/C:H/I:L/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.7th percentile
Published
2022-08-25T22:42Z
EPSS history
Timeline
  • 25 AUG 22:42Z
    Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability
    cvelistv5