CVE-2022-38089

🗓️ 24 Aug 2022 08:41:29Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 73 Views

Stored XSS vulnerability in Exment, allows remote authenticated attacker to inject arbitrary script. (CVE-2022-38089

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-38089	24 Aug 202209:15	–	attackerkb
Circl	CVE-2022-38089	24 Aug 202212:22	–	circl
CNNVD	Exment 跨站脚本漏洞	24 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-38089	24 Aug 202208:41	–	cvelist
EUVD	EUVD-2022-40691	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#46239102: Multiple vulnerabilities in Exment	24 Aug 202200:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in Exment	24 Aug 202205:23	–	jvn
NVD	CVE-2022-38089	24 Aug 202209:15	–	nvd
Prion	Cross site scripting	24 Aug 202209:15	–	prion
Positive Technologies	PT-2022-24195 · Exceedone · Exment +1	24 Aug 202200:00	–	ptsecurity

NVD

Node

exceedone exmentRange≤5.0.2

exceedone laravel-adminRange≤3.0.0

[
  {
    "product": "Exment",
    "vendor": "Kajitori Co.,Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "(PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier,  (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier"
      }
    ]
  }
]