← back
CVE-2022-30519

CVE-2022-30519

CVSS 6.1 MEDIUMEPSS 2.5%CWE-79
XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/171627/Reprise-Software-RLM-14.2BL4-Cross-Site-Scripting.htmlunverifiedexploitdbwww.exploit-db.com/exploits/51188unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/171627/Reprise-Software-RLM-14.2BL4-Cross-Site-Scripting.htmlhttps://github.com/earth2sky/Disclosed/blob/main/CVE-2022-30519