Medium · 6.1 CVE-2022-46287 EUVD-2022-49105GHSA-79pm-w95p-mx7x

Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an a…

Published Dec 19, 2022 · Updated Apr 17, 2025 · Assigned by jpcert

Vendor: Japan Construction Information Center Product: DENSHI NYUSATSU CORE SYSTEM

Description

Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

Vendor	Product	Affected	Fixed
Japan Construction Information Center	DENSHI NYUSATSU CORE SYSTEM	v6 R4 and earlier	—

References

https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdf
https://jvn.jp/en/jp/JVN96321933/index.html