CVE-2022-22791

Опубликовано: 28 янв. 2022

Источник: nvd

CVSS3: 6.6

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.

Ссылки

https://www.gov.il/en/departments/faq/cve_advisories
Third Party Advisory
VDB Entry
https://www.gov.il/en/departments/faq/cve_advisories
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:synel:eharmony:8.0.2.3:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00117

Низкий

6.6 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-g84v-6fgf-jw3g

github

около 4 лет назад

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.

EPSS

Процентиль: 31%

0.00117

Низкий

6.6 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79