WSO2 Management CVE-2022-29548跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/cve-2022-29548
• https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2022/WSO2-2021-1603/
• https://github.com/cxosmo/CVE-2022-29548
• https://www.sentinelone.com/vulnerability-database/cve-2022-29548/
• https://www.exploit-db.com/exploits/50970
• https://access.redhat.com/security/cve/cve-2022-29548
• https://threatprotect.qualys.com/2022/06/06/wso2-fixes-cross-site-scripting-xss-vulnerability-in-its-multiple-products-cve-2022-29548/
• https://security.docs.wso2.com/en/latest/security-announcements/cve-to-wso2-security-advisory-mapping/

Related Vulnerabilities

• PoCCVE-2026-57219: RabbitMQ Management - OAuth 2 Client Secret Disclosure
• 研華科技｜Hospital Queuing Management - 存在2個漏洞
• FOGProject /fog/management/export.php 信息泄露漏洞（CVE-2025-58443）
• Campcodes Online Loan Management System /ajax.php SQL 注入漏洞（CVE-2025-9744）
• PoChazelcast-management-exposure: Hazelcast Management Center - Configuration Exposure
• IEI 威強電工業電腦｜iRM-IEI Remote Management - 存在2個漏洞
• Four-Faith F3x36 /Management.asp 默认口令漏洞（CVE-2024-9643）
• Arcserve Unified Data Protection /management/wizardLogin 权限绕过漏洞（CVE-2024-0799）
• PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication Bypass
• PoCwyse-devicegroup-register: Dell Wyse Management Suite - Unauthenticated Device Registration
• 深信服运维安全管理系统 /fort/system;help/concentration_management/uninstall_patch 命令执行漏洞
• 深信服运维安全管理系统 /fort/system;help/concentration_management/del_patch 命令执行漏洞
• WSO2 Management 存在SSRF漏洞(CVE-2025-5350)