Medium severity6.5NVD Advisory· Published Oct 25, 2022· Updated Jun 17, 2026
CVE-2022-36783
CVE-2022-36783
Description
AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.
Affected products
5A32.0.580-277+ 4 more
- (no CPE)range: A32.0.580-277
- (no CPE)range: A32.10.410-212
- (no CPE)range: A32.20.230-35
- (no CPE)
- cpe:2.3:a:algosec:fireflow:*:*:*:*:*:*:*:*range: >=a32.0,<a32.0.580-277
Patches
Vulnerability mechanics
References
1- www.gov.il/en/Departments/faq/cve_advisoriesnvdThird Party Advisory
News mentions
0No linked articles in our index yet.