exploitDog

CVE-2022-0928

Опубликовано: 11 мар. 2022

Источник: nvd

CVSS3: 6.8

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.

Ссылки

https://github.com/microweber/microweber/commit/fc9137c031f7edec5f50d73b300919fb519c924a
Patch
Third Party Advisory
https://huntr.dev/bounties/085aafdd-ba50-44c7-9650-fa573da29bcd
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/microweber/microweber/commit/fc9137c031f7edec5f50d73b300919fb519c924a
Patch
Third Party Advisory
https://huntr.dev/bounties/085aafdd-ba50-44c7-9650-fa573da29bcd
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*

Версия до 1.2.11 (включая)

EPSS

Процентиль: 89%

0.04739

Низкий

6.8 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-jjp3-m93h-5jm4

CVSS3: 6.8

github

почти 4 года назад

Cross-site Scripting in microweber

EPSS

Процентиль: 89%

0.04739

Низкий

6.8 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

CWE-79