CVE-2022-25979

Опубликовано: 31 янв. 2023

Источник: nvd

CVSS3: 5.4

CVSS3: 6.1

EPSS Низкий

Описание

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.

Ссылки

https://github.com/jsuites/jsuites/commit/b31770d5fe91684a00177f629aab933139c32d9f
Patch
Third Party Advisory
https://github.com/jsuites/jsuites/issues/134
Issue Tracking
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253331
Exploit
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JS-JSUITES-3226764
Exploit
Third Party Advisory
https://github.com/jsuites/jsuites/commit/b31770d5fe91684a00177f629aab933139c32d9f
Patch
Third Party Advisory
https://github.com/jsuites/jsuites/issues/134
Issue Tracking
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253331
Exploit
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JS-JSUITES-3226764
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jsuites:jsuites:*:*:*:*:*:*:*:*

Версия до 5.0.1 (исключая)

EPSS

Процентиль: 32%

0.00124

Низкий

5.4 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-r4hg-4cpq-q57c

CVSS3: 6.1

github

около 3 лет назад

jSuites subect to Cross-site Scripting

EPSS

Процентиль: 32%

0.00124

Низкий

5.4 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79