CVE-2022-38481

Summary

An issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP2. The application is prone to reflected Cross-site Scripting (XSS) in several features.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.mega.com/en/hopex-platform
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-38481

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.mega.com/en/hopex-platform
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-38481
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-38481

• ←Previous
• Next→