medium5.4Public exploit code
CVE-2022-47877
A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in the Logs page via th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Jedox 2020.2.5 - Stored Cross-Site Scripting in Log-Module2023-05-05 · webapps · php
Impact
A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in the Logs page via the log module 'log'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jedox | Jedox | Version 2020.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/172153/Jedox-2020.2.5-Cross-Site-Scripting.html
- https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf
- http://packetstormsecurity.com/files/172153/Jedox-2020.2.5-Cross-Site-Scripting.html
- https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf