medium6.1Public exploit code
CVE-2022-30519
XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Reprise Software RLM v14.2BL4 - Cross-Site Scripting (XSS)2023-04-01 · webapps · windows
Impact
XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Reprisesoftware | Reprise License Manager | from 14.2bl4 through 16.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171627/Reprise-Software-RLM-14.2BL4-Cross-Site-Scripting.html
- https://github.com/earth2sky/Disclosed/blob/main/CVE-2022-30519
- http://packetstormsecurity.com/files/171627/Reprise-Software-RLM-14.2BL4-Cross-Site-Scripting.html
- https://github.com/earth2sky/Disclosed/blob/main/CVE-2022-30519