exploitDog

CVE-2022-41442

Опубликовано: 07 окт. 2022

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.

Ссылки

https://github.com/xiebruce/PicUploader/commit/2b0411bddb7942e0ace136a82d4ccde0fe66f263
Patch
Third Party Advisory
https://github.com/xiebruce/PicUploader/issues/80
Exploit
Issue Tracking
Third Party Advisory
https://github.com/xiebruce/PicUploader/commit/2b0411bddb7942e0ace136a82d4ccde0fe66f263
Patch
Third Party Advisory
https://github.com/xiebruce/PicUploader/issues/80
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:picuploader_project:picuploader:2.6.3:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00218

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-whxf-92hp-qfgc

CVSS3: 6.1

github

больше 3 лет назад

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.

EPSS

Процентиль: 44%

0.00218

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79