CVE-2022-37137

PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. The XSS can be obtain from injecting under "Message" field with "description" parameter with the specially crafted payload to gain Stored XSS. The XSS then will prompt after that or can be access from the view ticket function.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/saitamang/POC-DUMP/tree/main/PayMoney	Exploit Third Party Advisory
https://paymoney.techvill.org/	Vendor Advisory
https://github.com/saitamang/POC-DUMP/tree/main/PayMoney	Exploit Third Party Advisory
https://paymoney.techvill.org/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:techvill:paymoney:3.3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-09-14 11:15

Updated : 2024-11-21 07:14

NVD link : CVE-2022-37137

Mitre link : CVE-2022-37137

CVE.ORG link : CVE-2022-37137

JSON object : View

Products Affected

techvill

paymoney

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2022-37137", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2022-09-14T11:15:50.153", "references": [{"url": "https://github.com/saitamang/POC-DUMP/tree/main/PayMoney", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://paymoney.techvill.org/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/saitamang/POC-DUMP/tree/main/PayMoney", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://paymoney.techvill.org/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. The XSS can be obtain from injecting under \"Message\" field with \"description\" parameter with the specially crafted payload to gain Stored XSS. The XSS then will prompt after that or can be access from the view ticket function."}, {"lang": "es", "value": "PayMoney versi\u00f3n 3.3, es vulnerable a un ataque de tipo Cross-Site Scripting (XSS) Almacenado durante la respuesta al ticket. El ataque de tipo XSS puede obtenerse inyectando en el campo \"Message\" con el par\u00e1metro \"description\" la carga \u00fatil especialmente dise\u00f1ada para conseguir un ataque de tipo XSS almacenado. El XSS entonces ser\u00e1 presentado despu\u00e9s de eso o puede accederse desde la funci\u00f3n view ticket"}], "lastModified": "2024-11-21T07:14:30.273", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:techvill:paymoney:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC52EC86-7805-4E05-BA00-A16B35F625DD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}