Skip to content
OpenAdvisories
Unscored CVE-2022-23137 EUVD-2022-28228GHSA-96p5-93ww-4wgg

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and w…

Published May 11, 2022 · Updated Aug 3, 2024 · Assigned by zte

Description

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks the url, an XSS attack will be triggered.

Affected products

VendorProductAffectedFixed
— ZXCDN All versions up to ZXCDN-IAMV8.01.01.02 —

References