Description

Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /rukovoditel/index.php?module=users/login. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Remediation

References

CVE-2022-45020

Related Vulnerabilities

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5977)

WordPress Plugin Browser and Operating System Finder Cross-Site Request Forgery (1.1)

Squid Incorrect Conversion between Numeric Types Vulnerability (CVE-2023-46848)

Oracle Database Server CVE-2013-5858 Vulnerability (CVE-2013-5858)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28710)

Severity

High

Classification

CVE-2022-45020 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H

Tags

Missing Update Known Vulnerabilities