Ragic, Inc. Ragic - Reflected XSS
CVE-2022-40739

5.4MEDIUM

Key Information:

Vendor: Ragic, Inc.
Status: Ragic
Vendor: CVE Published:; 31 October 2022

🔔 Create Ragic, Inc. Vulnerability Alert

What is CVE-2022-40739?

Ragic report generation page has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript to perform XSS (Reflected Cross-Site Scripting) attack.

Affected Version(s)

Ragic <= 2022/06/28

References

https://www.twcert.org.tw/tw/cp-132-6645-77bf8-1.html

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 31, 2022
Vulnerability Reserved
Sep 15, 2022

CVE-2022-40739 Data

JSON