CVE-2018-15574

An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2. It is a cross-site scripting vulnerability in the /goform/edit_lf_get_data lf parameter via GET or POST. NOTE: the vendor has stated "We do not consider this a vulnerability."

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2018-08-20

Last modified

2024-11-14

Weaknesses

CWE-79

Affected products

• Reprise License Manager (Reprisesoftware)

References

• https://bittherapy.net/rce-with-arbitrary-file-write-and-xss-in-reprise-license-manager/
• https://reprisesoftware.com/docs/whats-new.html