CVE-2022-38801

CVSS V2 None CVSS V3 None
Description
In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting.
Overview
  • CVE ID
  • CVE-2022-38801
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-30T14:15:10.787
  • Last Modified Date
  • 2022-12-02T15:12:22.767
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:zkteco:biotime:*:*:*:*:*:*:*:* 1 OR 8.5.4
References
Reference URL Reference Tags
https://gist.github.com/hamoshwani/5ac860dd6757440174f446c62b24653f Third Party Advisory
https://www.zkteco.com/ Product
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-38801
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38801
History
Created Old Value New Value Data Type Notes
2022-12-07 18:05:40 Added to TrackCVE