CVE-2022-3255

🗓️ 21 Sep 2022 12:00:21Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 69 Views

If attacker controls victim's browser script, full compromise possible

Reporter	Title	Published	Views	Family All 14
Huntr	Reflected XSS In User/Roles Function	15 Sep 202203:57	–	huntr
Circl	CVE-2022-3255	21 Sep 202216:40	–	circl
CNNVD	Pimcore 跨站脚本漏洞	21 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-3255 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore	21 Sep 202212:00	–	cvelist
EUVD	EUVD-2022-6966	3 Oct 202520:07	–	euvd
Github Security Blog	Pimcore vulnerable to cross site scripting	22 Sep 202200:00	–	github
NVD	CVE-2022-3255	21 Sep 202213:15	–	nvd
OSV	CVE-2022-3255 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore	21 Sep 202212:00	–	osv
OSV	GHSA-WQR6-57QM-HHR5 Pimcore vulnerable to cross site scripting	22 Sep 202200:00	–	osv
Prion	Code injection	21 Sep 202213:15	–	prion

NVD

Node

pimcore pimcoreRange<10.5.7

[
  {
    "product": "pimcore/pimcore",
    "vendor": "pimcore",
    "versions": [
      {
        "lessThan": "10.5.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]