medium6.1
CVE-2022-26155
An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3.
Impact
An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS can occur via a payload in the SAMLResponse parameter of the HTTP request body.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cherwell | Cherwell Service Management | Version 10.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/l00neyhacker/CVE-2022-26155
- https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html
- https://github.com/l00neyhacker/CVE-2022-26155
- https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html