CVE-2022-1293
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Summary
The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Thales | Citadel Web Client | 7.1.1 < 7.1.2 | affected |
| Thales | Citadel Macosx Desktop Client | 7.1.1 < 7.1.2 | affected |
| Thales | Citadel Windows Desktop Client | 7.1.1 < 7.1.2 | affected |
Weaknesses
- CWE-80: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.