Code Injection Vulnerability in Nokia NetAct Administration of Measurements

CVE-2022-28864

Summary

A code injection vulnerability exists in the administration section of Nokia NetAct 22, specifically within the Administration of Measurements feature. A malicious actor can manipulate the templateName parameter to insert harmful code. This malicious payload can then be downloaded as a .csv or .xlsx file, which, when executed on an unsuspecting user's machine, can lead to unauthorized actions. This vulnerability underscores the importance of securing input fields against manipulation to prevent such exploits.

References