CVE-2022-23397

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. NOTE: the vendor disputes this because the ado.im reference has "no clear steps of reproduction."

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-03-04

Last modified

2024-10-29

Weaknesses

CWE-79

Affected products

• Ez-net Portal (Cedargate)

References

• https://ado.im/cedar-gate-ez-net