CVE-2022-47968

Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page

Medium · published December 27, 2022

CVSS v3.1
5.4
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page. The stored XSS will be triggered in the "Application list" page.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00416 · 34.8th percentile
Published
2022-12-27T00:00Z
EPSS history
Timeline
  • 27 DEC 00:00Z
    Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page
    cvelistv5