Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-40248

An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
certcc

Description

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the "Product Affected" field.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CERT/CC VINCE - The Vulnerability Information and Coordination Environment

  • 1.48.0 to < 1.50.4affected

References