Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-23137

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks the url, an XSS attack

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
zte

Description

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks the url, an XSS attack will be triggered.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a ZXCDN

  • All versions up to ZXCDN-IAMV8.01.01.02affected

References