Lucene search
MitreCVE-2022-34297HistoryDec 09, 2022 - 10:15 p.m.
CVE-2022-34297
2022-12-0922:15:10
CWE-79
mitre
web.nvd.nist.gov
68
cve-2022-34297
yii
yii2
gii
xss
security
vulnerability
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
25.0%
Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.
Affected configurations
Node
yiiframeworkgiiRange≤2.2.4yii2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| yiiframework | gii | * | cpe:2.3:a:yiiframework:gii:*:*:*:*:*:yii2:*:* |
Related
cvelist
cvelist
CVE-2022-34297
2022-12-09 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2022-12-12 03:08:25
osv
osv
Yii2 Gii Cross-site Scripting vulnerability
2022-12-10 00:30:17
github
github
Yii2 Gii Cross-site Scripting vulnerability
2022-12-10 00:30:17
prion
prion
Cross site scripting
2022-12-09 22:15:00
nvd
nvd
CVE-2022-34297
2022-12-09 22:15:10
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
25.0%
Related for CVE-2022-34297