high7.6
CVE-2022-37317
Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability.
Impact
Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious code in the context of the web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rsa | Archer | from 6.0 before 6.10.0.4 from 6.11 before 6.11.0.2.4 |