CVE-2022-42948

Vulnerability Description

Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.

Vulnerability Details

Published Date

March 24, 2023

Last Modified

November 03, 2025

Source

NVD

CVE-2022-42948

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment