XSS vulnerability in Citadel
CVE-2022-1293

5.7MEDIUM

Key Information:

Vendor: Thales
Status: Citadel Web Client; Citadel Mac OSx Desktop Client; Citadel Windows Desktop Client
Vendor: CVE Published:; 2 August 2022

What is CVE-2022-1293?

The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.

Citadel Macosx Desktop Client Macosx 7.1.1 < 7.1.2

Citadel Web Client Web Client 7.1.1 < 7.1.2

Citadel Windows Desktop Client Windows 7.1.1 < 7.1.2

Score:

5.7

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

CVE-2022-1293 Data