Lucene search

CVE-2022-48197

🗓️ 02 Jan 2023 16:10:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 93 Views🌐 WEB

Reflected XSS in YUI2 TreeVie

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 13
NVD	CVE-2022-48197	2 Jan 202316:15	–	nvd
RedhatCVE	CVE-2022-48197	23 May 202500:32	–	redhatcve
Cvelist	CVE-2022-48197	2 Jan 202300:00	–	cvelist
Vulnrichment	CVE-2022-48197	2 Jan 202300:00	–	vulnrichment
Packet Storm	Yahoo User Interface TreeView 2.8.2 Cross Site Scripting	3 Apr 202300:00	–	packetstorm
Prion	Cross site scripting	2 Jan 202316:15	–	prion
UbuntuCve	CVE-2022-48197	2 Jan 202300:00	–	ubuntucve
Nuclei	Yahoo User Interface library (YUI2) TreeView v2.8.2 - Cross-Site Scripting	4 Oct 202301:49	–	nuclei
OSV	UBUNTU-CVE-2022-48197	2 Jan 202316:15	–	osv
OSV	CVE-2022-48197	2 Jan 202316:15	–	osv

Nvd

Node

yui_project yuiRange2000–2800

Source	Link
github	www.github.com/ryan412/CVE-2022-48197
literatejava	www.literatejava.com/security/is-it-really-a-cve-reported-xss-in-yui-2-8-2/
github	www.github.com/yui/yui2/tags
packetstormsecurity	www.packetstormsecurity.com/files/171633/Yahoo-User-Interface-TreeView-2.8.2-Cross-Site-Scripting.html
github	www.github.com/yui/yui2/blob/yui2-2.8.2-8/sandbox/treeview/inc-rightbar.php
github	www.github.com/ryan412/CVE-2022-48197/blob/main/README.md

Parameter	Position	Path	Description	CWE
mode	query param	/libs/bower/bower_components/yui2/sandbox/treeview/up.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79
mode	query param	/libs/bower/bower_components/yui2/sandbox/treeview/sam.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79
mode	query param	/libs/bower/bower_components/yui2/sandbox/treeview/renderhidden.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79
mode	query param	/libs/bower/bower_components/yui2/sandbox/treeview/removechildren.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79
mode	query param	/libs/bower/bower_components/yui2/sandbox/treeview/removeall.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79
mode	query param	/libs/libs/bower/bower_components/yui2/sandbox/treeview/readd.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79
mode	query param	/libs/bower/bower_components/yui2/sandbox/treeview/overflow.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79
mode	query param	/libs/bower/bower_components/yui2/sandbox/treeview/newnode2.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79
mode	query param	/libs/bower/bower_components/yui2/sandbox/treeview/newnode.php	Reflected XSS vulnerability allowing script execution via the 'mode' query parameter.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jan 2023 16:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS36.1

EPSS0.19034

SSVC

CWE-79