Description
The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. NOTE: the vendor disputes this because the ado.im reference has "no clear steps of reproduction."
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting http/cves/2022/CVE-2022-23397.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.