| |
Vulnerability CVE-2022-22999
Published: 2022-07-25
| Description: |
Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user with elevated privileges access to drives being backed up to construct and inject JavaScript payloads into an authenticated user's browser. As a result, it may be possible to gain control over the authenticated session, steal data, modify settings, or redirect the user to malicious websites. The scope of impact can extend to other components. |
References: |
https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
