medium5.4
CVE-2022-39834
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2.
Impact
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Keyfactor | Primekey Ejbca | through 7.9.0.2 |