CVE-2022-42001

Опубликовано: 15 нояб. 2022

Источник: nvd

CVSS3: 3.3

CVSS3: 5.4

EPSS Низкий

Описание

Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the book navigation.

Ссылки

https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-05
Vendor Advisory
https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-05
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*:*

Версия от 4.1.0 (включая) до 4.2.1 (исключая)

EPSS

Процентиль: 53%

0.00298

Низкий

3.3 Low

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-mh3f-7jrf-xp34

CVSS3: 5.4

github

около 3 лет назад

Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the book navigation.

EPSS

Процентиль: 53%

0.00298

Низкий

3.3 Low

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79