Vulnerability CVE-2022-40204


Published: 2022-12-01

Description:
A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://www.digitalalertsystems.com/security-advisory

Copyright 2024, cxsecurity.com

 

Back to Top