Lucene search
HistoryFeb 06, 2023 - 2:15 p.m.
CVE-2022-48085
softr
v2.0
html injection
vulnerability
work space name
parameter
nvd
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
47.7%
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.
Affected configurations
Node
softrsoftrMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| softr:softr | softr | eq | 2.0 |
Related
nvd
nvd
CVE-2022-48085
2023-02-06 14:15:09
cvelist
cvelist
CVE-2022-48085
2023-02-06 00:00:00
prion
prion
Design/Logic Flaw
2023-02-06 14:15:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
47.7%
Related for CVE-2022-48085