Lucene search
OpenJS FoundationFRIENDSOFPHP:SILVERSTRIPE:FRAMEWORK:CVE-2022-37430HistoryNov 21, 2021 - 12:00 a.m.
CVE-2022-37430 - Stored XSS using uppercase characters in HTMLEditor
2021-11-2100:00:00
OpenJS Foundation
github.com
4
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.7%
Affected configurations
Node
silverstripeframeworkRange<4.11.13
| CPE | Name | Operator | Version |
|---|---|---|---|
| silverstripe/framework | lt | 4.11.13 |
Related
cve
cve
CVE-2022-37430
2022-11-23 02:15:09
nvd
nvd
CVE-2022-37430
2022-11-23 02:15:09
cvelist
cvelist
CVE-2022-37430
2022-11-23 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2022-11-24 05:41:26
prion
prion
Design/Logic Flaw
2022-11-23 02:15:00
osv
osv
CVE-2022-37430
2022-11-23 02:15:09
Stored XSS using uppercase characters in HTMLEditor
2022-11-21 23:59:38
github
github
Stored XSS using uppercase characters in HTMLEditor
2022-11-21 23:59:38
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.7%
Related for FRIENDSOFPHP:SILVERSTRIPE:FRAMEWORK:CVE-2022-37430