Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-42715

A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted CSV file will, when uploaded, trigger arbitrary JavaScript code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.9%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2022-42715


Contact Us

Shodan ® - All rights reserved