Lucene search
K

CVE-2022-38462

🗓️ 22 Nov 2022 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 90 Views🌐 WEB

Silverstripe/framework through 4.11 is vulnerable to XSS by crafting a return URL on /dev/build or /Security/login request

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2022-38462
22 Nov 202216:13
circl
CNNVD
SilverStripe 跨站脚本漏洞
22 Nov 202200:00
cnnvd
CNVD
SilverStripe Cross-Site Scripting Vulnerability
24 Nov 202200:00
cnvd
Cvelist
CVE-2022-38462
22 Nov 202200:00
cvelist
EUVD
EUVD-2022-7444
3 Oct 202520:07
euvd
Friends Of PHP
CVE-2022-38462 - Reflected XSS in querystring parameters
21 Nov 202100:00
friendsofphp
Github Security Blog
Reflected XSS in querystring parameters
21 Nov 202223:59
github
NVD
CVE-2022-38462
22 Nov 202213:15
nvd
OSV
GHSA-VVXF-R4VM-2VM6 Reflected XSS in querystring parameters
21 Nov 202223:59
osv
Prion
Design/Logic Flaw
22 Nov 202213:15
prion
Rows per page
NVD
Node
OR
silverstripeframeworkRange3.0.03.7.7
ParameterPositionPathDescriptionCWE
returnURLquery param/dev/buildXSS via crafted return URL parameter in /dev/buildCWE-79
returnURLquery param/Security/loginXSS via crafted return URL parameter in /Security/loginCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2025 05:15Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.16.1
EPSS0.0068
SSVC
90