Lucene search

K
cve[email protected]CVE-2022-45756
HistoryDec 12, 2022 - 3:15 a.m.

CVE-2022-45756

2022-12-1203:15:09
CWE-79
web.nvd.nist.gov
18
cve-2022-45756
sens v1.0
cross site scripting
xss
nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

31.5%

SENS v1.0 is vulnerable to Cross Site Scripting (XSS).

Affected configurations

NVD
Node
sens_projectsensMatch-
CPENameOperatorVersion
sens_project:senssens project senseq-

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

31.5%

Related for CVE-2022-45756