CVE-2022-37317

published 2022-08-25

CVE-2022-37317: Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could potentially exploit this vulnerability by…

Priority P4 26 medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious code in the context of the web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
rsa	archer	>= 6.0 < 6.10.0.4	6.10.0.4
rsa	archer	>= 6.11 < 6.11.0.2.4	6.11.0.2.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79