CVE-2022-25323

MEDIUMNuclei

ZEROF Web Server 2.0 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2022-25323 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

ZEROF Web Server 2.0 allows /admin.back XSS.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMZEROF Web Server 2.0 - Cross-Site ScriptingCVSS 6.1

ZEROF Web Server 2.0 allows /admin.back cross-site scripting.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.

Remediation

Apply the latest security patches or updates provided by the vendor to fix the XSS vulnerability in ZEROF Web Server 2.0.

WeaknessesCWE-79
Authorspikpikcu
Template tagscvecve2022xsszerofvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:zerof:web_server:2.0:*:*:*:*:*:*:*
Shodan: cpe:"cpe:2.3:a:google:web_server"
https://github.com/awillix/research/blob/main/cve/CVE-2022-25323.md https://nvd.nist.gov/vuln/detail/CVE-2022-25323 https://awillix.ru/ https://github.com/ARPSyndicate/kenzer-templates https://github.com/awillix/research

Source: ProjectDiscovery

References

3