Lucene search

K
cveMitreCVE-2022-47968
HistoryDec 27, 2022 - 6:15 p.m.

CVE-2022-47968

2022-12-2718:15:11
CWE-79
mitre
web.nvd.nist.gov
31
heimdall
dashboard
xss
security vulnerability
application management
cve-2022-47968

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.8%

Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via “Application name” to the “Add application” page. The stored XSS will be triggered in the “Application list” page.

Affected configurations

Nvd
Node
linuxserverheimdall_application_dashboardRange2.5.4
VendorProductVersionCPE
linuxserverheimdall_application_dashboard*cpe:2.3:a:linuxserver:heimdall_application_dashboard:*:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.8%

Related for CVE-2022-47968