Description
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege user.
Medium · 5.4
CVE-2022-39834
EUVD-2022-42279GHSA-mw97-9v5p-rf9q
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can stor…
Published Nov 17, 2022 · Updated Apr 29, 2025 · Assigned by mitre