CVE-2022-4514

🗓️ 15 Dec 2022 00:00:00Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Vulnerability found in Opencaching Deutschland oc-server3 allowing remote cross site scripting via varset.inc.ph

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-4514	15 Dec 202222:30	–	circl
CNNVD	oc-server3 跨站脚本漏洞	15 Dec 202200:00	–	cnnvd
Cvelist	CVE-2022-4514 Opencaching Deutschland oc-server3 varset.inc.php cross site scripting	15 Dec 202200:00	–	cvelist
EUVD	EUVD-2022-51854	3 Oct 202520:07	–	euvd
NVD	CVE-2022-4514	15 Dec 202220:15	–	nvd
Prion	Cross site scripting	15 Dec 202220:15	–	prion
Positive Technologies	PT-2022-27414 · Opencaching Deutschland · Opencaching Deutschland Oc-Server3	15 Dec 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-4514	23 May 202500:27	–	redhatcve
Vulnrichment	CVE-2022-4514 Opencaching Deutschland oc-server3 varset.inc.php cross site scripting	15 Dec 202200:00	–	vulnrichment

NVD

Node

opencaching oc-server3Match-

[
  {
    "vendor": "Opencaching Deutschland",
    "product": "oc-server3",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/OpencachingDeutschland/oc-server3/commit/4bdd6a0e7b7760cea03b91812cbb80d7b16e3b5f
vuldb	www.vuldb.com/
github	www.github.com/OpencachingDeutschland/oc-server3/pull/902

Parameter	Position	Path	Description	CWE
varvalue	query param	htdocs/lang/de/ocstyle/varset.inc.php	XSS via manipulation of varvalue in htdocs/lang/de/ocstyle/varset.inc.php leading to remote exploitability.	CWE-707, CWE-79

21 Nov 2024 07:35Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.13.5 - 6.1

EPSS0.00272

SSVC