Stored Cross-Site Scripting Vulnerability in REDCap by Vanderbilt University

CVE-2022-24127

What is CVE-2022-24127?

An XSS vulnerability has been identified in the REDCap application, specifically within the edit_project_settings.php file. This flaw permits users with project management permissions to inject arbitrary JavaScript code into the app_title field when modifying an existing project. Consequently, this injected code can be executed in the context of other users who view the project, posing a significant security risk. Users are advised to review their project settings and update to secure versions to mitigate vulnerability exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References