CVE-2022-39054 — COWELL INFORMATION SYSTEM CO., LTD. enterprise travel management system - Reflected XSS

CVE-2022-39054

COWELL INFORMATION SYSTEM CO., LTD. enterprise travel management system - Reflected XSS PUBLISHED

Description (CNA)

Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

Affected (CNA)

Vendor / product	Versions
COWELL INFORMATION SYSTEM CO., LTD. / enterprise travel management system	unknown 0

CWE

CWE-79

References

https://www.twcert.org.tw/tw/cp-132-6524-74530-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6524-74530-1.html

CISA-ADP

No English description supplied.

No references supplied.