CVE-2022-36783mediumCWE-79

CVE-2022-36783: medium-severity vulnerability in AlgoSec FireFlow A32.0

AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)

Published · Updated

Follow this CVE+ Monitor FireFlow A32.0+ Monitor FireFlow A32.10

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected products
AlgoSec · FireFlow A32.0AlgoSec · FireFlow A32.10AlgoSec · FireFlow A32.20