← Database

CVE-2022-26494

MEDIUM CVSS: 4.8 Published: 2022-03-21 Modified: 2026-06-17

Description

An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name.

Affected Platforms

Primekey Signserver

Weakness Type

CWE-79

References