← All advisories

Unrated severityNVD Advisory· Published Feb 20, 2023· Updated Apr 1, 2025

Visioweb.js - Prototype Pollution can results in XSS

CVE-2022-3901

Description

Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system.

Affected products

2

Visioweb/Visioweb.jsllm-create
Range: <= 1.10.6
Visio Globe/Visiowebv5
Range: 0

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

csirt.divd.nl/CVE-2022-3901mitrethird-party-advisory

News mentions

0

No linked articles in our index yet.