CVE-2022-3901

Summary

Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system.

Affected Software

VendorProductVersion RangeStatus
Visio GlobeVisioweb0 <= 1.10.6affected

Weaknesses

  • CWE-1321: CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References