CVE-2022-29485

Опубликовано: 14 июн. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unspecified vectors.

Ссылки

https://github.com/shirasagi/shirasagi
Product
Third Party Advisory
https://jvn.jp/en/jp/JVN32962443/index.html
Third Party Advisory
https://www.ss-proj.org/
Vendor Advisory
https://www.ss-proj.org/support/843.html
Patch
Vendor Advisory
https://github.com/shirasagi/shirasagi
Product
Third Party Advisory
https://jvn.jp/en/jp/JVN32962443/index.html
Third Party Advisory
https://www.ss-proj.org/
Vendor Advisory
https://www.ss-proj.org/support/843.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ss-proj:shirasagi:*:*:*:*:*:*:*:*

Версия от 1.0.0 (включая) до 1.14.3 (исключая)

cpe:2.3:a:ss-proj:shirasagi:1.15.0:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00381

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-x774-c85x-jfqf