CVE-2022-23137
MEDIUMZTE ZXCDN Firmware < zxcdn-iamv8.01.01.02 - Reflected Cross-Site Scripting via Content Clearing Request URL
Title source: llmDescription
ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks the url, an XSS attack will be triggered.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1024404
Scores
CVSS v3
6.1
EPSS
0.0032
EPSS Percentile
54.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
zte/zxcdn_firmware
< zxcdn-iamv8.01.01.02
Published
May 11, 2022
Tracked Since
Feb 18, 2026