CVE-2022-27258

Опубликовано: 15 апр. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.

Ссылки

https://framagit.org/hubzilla/core/-/commit/0784cd593a39a4fc297e8a82f7e79bc8019a0868#1c497fbb3a46b78edf04cc2a2fa33f67e3ffbe2a
Release Notes
Third Party Advisory
https://hubzilla.org/channel/hubzilla/
Release Notes
Vendor Advisory
https://framagit.org/hubzilla/core/-/commit/0784cd593a39a4fc297e8a82f7e79bc8019a0868#1c497fbb3a46b78edf04cc2a2fa33f67e3ffbe2a
Release Notes
Third Party Advisory
https://hubzilla.org/channel/hubzilla/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hubzilla:hubzilla:7.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00307

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-27258

CVSS3: 6.1

debian

почти 4 года назад

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 ...

GHSA-qx2r-h2pf-6vgp

CVSS3: 6.1

github

почти 4 года назад

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.

EPSS

Процентиль: 53%

0.00307

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79