Skip to content
OpenAdvisories
Medium · 5.7 CVE-2022-1293 EUVD-2022-24622GHSA-85mj-gq7p-m95w

XSS vulnerability in Citadel

Published Aug 2, 2022 · Updated Sep 16, 2024 · Assigned by THA-PSIRT

Vendor: Thales Product: Citadel Macosx Desktop Client Product: Citadel Web Client Product: Citadel Windows Desktop Client Platform: Windows

Description

The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.

Affected products

VendorProductAffectedFixed
Thales Citadel Web Client 7.1.1 – < 7.1.2 7.1.2
Thales Citadel Macosx Desktop Client 7.1.1 – < 7.1.2 7.1.2
Thales Citadel Windows Desktop Client 7.1.1 – < 7.1.2 7.1.2

References