Headline
CVE-2022-25151: Redirecting…
Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive information, caused by the failure to set the HTTP Only flag. A remote attacker could exploit this vulnerability to gain access to the management interface by using this vulnerability in combination with a successful Cross-Site Scripting attack on a user.
Click here if you are not redirected.
Related news
Serious vulnerabilities found in ITarian software, patches available for SaaS products
Researchers at DIVD found vulnerabilities in ITarian products and worked with the vendor to develop patches. These patches are now available. The post Serious vulnerabilities found in ITarian software, patches available for SaaS products appeared first on Malwarebytes Labs.