One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 8288366 |
| Date de publication | 2022-12-06 18:15:09 (vue: 2022-12-06 20:07:18) |
| Titre | CVE-2022-23466 |
| Texte | teler is an real-time intrusion detection and threat alert dashboard. teler prior to version 2.0.0-rc.4 is vulnerable to DOM-based cross-site scripting (XSS) in the teler dashboard. When teler requests messages from the event stream on the `/events` endpoint, the log data displayed on the dashboard are not sanitized. This only affects authenticated users and can only be exploited based on detected threats if the log contains a DOM scripting payload. This vulnerability has been fixed on version `v2.0.0-rc.4`. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
| Notes | |
| Envoyé | Oui |
| Condensat | 2022 23466 `/events` `v2 advised affects alert are authenticated based been can contains cross cve dashboard data detected detection displayed dom endpoint event exploited fixed from has intrusion known log messages not only payload prior real requests sanitized scripting site stream teler threat threats time upgrade users version vulnerability vulnerable when workarounds xss |
| Tags | Vulnerability Threat |
| Stories | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.