CVE-2022-1293

XSS vulnerability in Citadel

State: Published
Severity: 5.7 Medium
Published: Aug 2, 2022
Updated: Sep 16, 2024
Reserved: Apr 11, 2022

Description

The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.

Scores

CVSS	Score	Vector	Source
3.1	5.7 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N	THA-PSIRT

Weaknesses

CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Affected Products

Product	Versions
Citadel Web ClientThales	7.1.1 to before 7.1.2Affected
Citadel Macosx Desktop ClientThales	7.1.1 to before 7.1.2Affected
Citadel Windows Desktop ClientThales	7.1.1 to before 7.1.2Affected

References

https://www.ercom.com/security-updates

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.