Description
In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting.
Medium · 5.4
CVE-2022-38801
EUVD-2022-41361GHSA-m7q8-qfg8-w5hc
In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting.
Published Nov 30, 2022 · Updated Apr 24, 2025 · Assigned by mitre