CVE-2022-3193 — n/a / ovirt-engine

CVE-2022-3193

n/a / ovirt-engine PUBLISHED

Description (CNA)

An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine. A parameter "error_description" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages.

Affected (CNA)

Vendor / product	Versions
n/a / ovirt-engine	affected ovirt-engine 4.3

CWE

CWE-79

References

https://bugzilla.redhat.com/show_bug.cgi?id=2126353

ADP enrichment

CVE

No English description supplied.

https://bugzilla.redhat.com/show_bug.cgi?id=2126353

CISA-ADP

No English description supplied.

No references supplied.