CVE-2022-38358

Published: Aug 15, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting attacks at /module/admin_notifiers/rules.php and /module/report_event/indext.php via the parameters rule_notification, rule_name, and rule_name_old, and at /module/admin_user/add_modify_user.php via the parameters user_name and user_email.

Vendor	Product	Versions
n/a	Eyes of Network	affected `5.3`

References

https://www.tenable.com/security/research/tra-2022-29

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-38358

Description

Affected Products

References