CVE-2022-41611

🗓️ 15 Nov 2022 14:24:49Reported by HWType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 66 Views

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin allows injection of arbitrary HTML

Reporter	Title	Published	Views	Family All 9
CNNVD	BlueSpice 跨站脚本漏洞	15 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-41611 Potential XSS on sidebar navigation	15 Nov 202214:24	–	cvelist
EUVD	EUVD-2022-44802	3 Oct 202520:07	–	euvd
NVD	CVE-2022-41611	15 Nov 202215:15	–	nvd
osv_cve	CVE-2022-41611	15 Nov 202215:15	–	osv_cve
Prion	Cross site scripting	15 Nov 202215:15	–	prion
Positive Technologies	PT-2022-25985 · Bluespice · Bluespice	15 Nov 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-41611: Improper Neutralization of Input During Web Page Generation	15 Nov 202200:00	–	rapid7
Vulnrichment	CVE-2022-41611 Potential XSS on sidebar navigation	15 Nov 202214:24	–	vulnrichment

NVD

Node

hallowelt bluespiceRange4.1.0–4.2.1

[
  {
    "vendor": "Hallo Welt! GmbH",
    "product": "BlueSpice",
    "versions": [
      {
        "version": "4",
        "status": "affected",
        "lessThan": "4.2.1",
        "versionType": "custom"
      }
    ]
  }
]