An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via a crafted email with HTML content in the Subject field.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2022-10-10T00:00:00

Updated: 2024-08-03T12:14:39.964Z

Reserved: 2022-09-08T00:00:00

Link: CVE-2022-40257

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-10-10T20:15:09.793

Modified: 2024-11-21T07:21:08.547

Link: CVE-2022-40257

cve-icon Redhat

No data.