exploitDog

CVE-2022-44724

Опубликовано: 04 нояб. 2022

Источник: nvd

CVSS3: 8.9

CVSS3: 5.4

EPSS Низкий

Описание

The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability.

Ссылки

https://stiltsoft.atlassian.net/browse/VD-3
Patch
Vendor Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-049.txt
Exploit
Third Party Advisory
https://stiltsoft.atlassian.net/browse/VD-3
Patch
Vendor Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-049.txt
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:stiltsoft:handy_macros_for_confluence:*:*:*:*:*:*:*:*

Версия от 3.0.0 (включая) до 3.5.5 (исключая)

EPSS

Процентиль: 58%

0.00363

Низкий

8.9 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-gq8p-433v-c385

CVSS3: 5.4

github

больше 3 лет назад

The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability.

EPSS

Процентиль: 58%

0.00363

Низкий

8.9 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79