Skip to content
OpenAdvisories
Medium WID-SEC-2023-0554 1 CVE

IBM Maximo Asset Management: Schwachstelle ermöglicht Cross-Site Scripting

Published Mar 2, 2023 · Updated Mar 2, 2023 · de-DE

Vendor: IBM Product: Maximo Asset Management 7.6.1.2

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 1

  • High 7.5
    CVE-2022-23647

    Cross-site Scripting in Prism

    Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin did not properly escape its output, leadin…

    prismjs prism node-prismjs prismjs Debian Ubuntu npm

Revision history

  1. #1

    Initiale Fassung

References