CVE-2022-48612

Summary

CVE-2022-48612 is a Universal Cross-Site Scripting (UXSS) vulnerability affecting ClassLink OneClick Extension versions up to 10.7. This issue allows remote attackers to inject malicious JavaScript into any webpage, as a regular expression intended to validate ClassLink-controlled URLs is missing in certain areas. Successful exploitation could result in unauthorized data access or manipulation, potentially leading to serious security consequences. It is essential that users of ClassLink OneClick Extension update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.