Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-36783

AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AlgoSec FireFlow A32.0

  • A32.0.580-277 to < A32.0.580-277*affected

AlgoSec FireFlow A32.10

  • A32.10.410-212 to < A32.10.410-212*affected

AlgoSec FireFlow A32.20

  • A32.20.230-35 to < A32.20.230-35*affected

References