CVE-2022-39301

MEDIO 5.4CVE-2022-39301 · Published 19/10/2022 · updated 17/06/2026

In breve

CVE-2022-39301 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda sra-admin (sra-admin project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.56%, superiore al 46.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
sra-admin sra-admin_project	`≤ 1.1.1`	No fix yet

Description

sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting (XSS) vulnerability. After logging into the sra-admin background, an attacker can upload an html page containing xss attack code in "Personal Center" - "Profile Picture Upload" allowing theft of the user's personal information. This issue has been patched in 1.1.2. There are no known workarounds.

References

momofoolish/sra-admin security advisory · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free