nvd-json-data-feeds/CVE-2022/CVE-2022-343xx/CVE-2022-34323.json

{
  "id": "CVE-2022-34323",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2023-01-01T08:15:10.157",
  "lastModified": "2023-01-09T16:22:36.953",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Filters and Display model features (OnlineBanking > Web Monitoring > Settings > Filters / Display models). The name of a filter or a display model is interpreted as HTML and can thus embed JavaScript code, which is executed when displayed. This is a stored XSS. Another issue is present in the Notification feature (OnlineBanking > Configuration > Notifications and alerts > Alerts *). The name of an alert is interpreted as HTML, and can thus embed JavaScript code, which is executed when displayed. This is a stored XSS. (Also, an issue is present in the File download feature, accessible via /OnlineBanking/cgi/isapi.dll/DOWNLOADFRS. When requesting to show the list of downloadable files, the contents of three form fields are embedded in the JavaScript code without prior sanitization. This is essentially a self-XSS.)"
    },
    {
      "lang": "es",
      "value": "Se descubrieron m\u00faltiples problemas XSS en Sage XRT Business Exchange 12.4.302 que permiten a un atacante ejecutar c\u00f3digo JavaScript en el contexto de los navegadores de otros usuarios. El atacante debe autenticarse para acceder a las funciones vulnerables. Hay un problema presente en las funciones del modelo Filtros y Visualizaci\u00f3n (Banca en l\u00ednea > Monitoreo web > Configuraci\u00f3n > Filtros / Modelos de visualizaci\u00f3n). El nombre de un filtro o de un modelo de visualizaci\u00f3n se interpreta como HTML y, por lo tanto, puede incrustar c\u00f3digo JavaScript, que se ejecuta cuando se muestra. Este es un XSS almacenado. Otro problema est\u00e1 presente en la funci\u00f3n de Notificaciones (Banca en L\u00ednea > Configuraci\u00f3n > Notificaciones y alertas > Alertas *). El nombre de una alerta se interpreta como HTML y, por lo tanto, puede incrustar c\u00f3digo JavaScript, que se ejecuta cuando se muestra. Este es un XSS almacenado. (Adem\u00e1s, existe un problema en la funci\u00f3n de descarga de archivos, a la que se puede acceder a trav\u00e9s de /OnlineBanking/cgi/isapi.dll/DOWNLOADFRS. Cuando se solicita mostrar la lista de archivos descargables, el contenido de tres campos del formulario se incrusta en el c\u00f3digo JavaScript sin previo aviso. sanitizaci\u00f3n. Esto es esencialmente un auto-XSS.)"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 2.7
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:sage:sage_xrt_business_exchange:12.4.302:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CD3D3D4-3872-4DBB-9355-43874D764788"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_xss.pdf",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Technical Description",
        "Third Party Advisory"
      ]
    }
  ]
}