Reflected Cross-Site Scripting Vulnerability in VMware Workspace ONE Assist
CVE-2022-31688
6.1MEDIUM
What is CVE-2022-31688?
VMware Workspace ONE Assist prior to version 22.10 suffers from a reflected cross-site scripting vulnerability. This flaw arises from insufficient sanitization of user inputs, allowing a malicious user to inject malicious JavaScript code into the browser of a targeted user via crafted requests. When exploited, this vulnerability could allow attackers to manipulate user sessions or carry out phishing attacks, posing significant risks to both users and organizations.
Affected Version(s)
VMware Workspace ONE Assist VMware Workspace ONE Assist prior to 22.10