CVE-2022-36783 — AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)

Description (CNA)

AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.

Affected (CNA)

Vendor / product	Versions
AlgoSec / FireFlow A32.0	affected A32.0.580-277 before A32.0.580-277*
AlgoSec / FireFlow A32.10	affected A32.10.410-212 before A32.10.410-212*
AlgoSec / FireFlow A32.20	affected A32.20.230-35 before A32.20.230-35*

CWE

No CWE identifiers supplied.

References

https://www.gov.il/en/Departments/faq/cve_advisories

ADP enrichment

CVE

No English description supplied.

https://www.gov.il/en/Departments/faq/cve_advisories

CISA-ADP

No English description supplied.

No references supplied.