medium5.4
CVE-2022-39026
U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields.
Impact
U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Edetw | U-Office Force | through 20.50.7821d |