On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context of the server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: f5

Published:

Updated: 2024-09-16T20:16:37.864Z

Reserved: 2022-04-19T00:00:00

Link: CVE-2022-27662

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-05-05T17:15:13.467

Modified: 2024-11-21T06:56:07.580

Link: CVE-2022-27662

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.