CVE-2022-3073

🗓️ 14 Dec 2022 09:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 9 Views

Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment

Reporter	Title	Published	Views	Family All 8
CNNVD	Bootstrap 跨站脚本漏洞	14 Dec 202200:00	–	cnnvd
CVE	CVE-2022-3073	14 Dec 202208:17	–	cve
Cvelist	CVE-2022-3073 Quaonos Schema ST4 example templates prone to XSS	14 Dec 202208:17	–	cvelist
EUVD	EUVD-2022-42502	3 Oct 202520:07	–	euvd
Prion	Input validation	14 Dec 202209:15	–	prion
Positive Technologies	PT-2022-20267 · Unknown · Quanos Schema St4	14 Dec 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-3073	22 May 202522:50	–	redhatcve
Vulnrichment	CVE-2022-3073 Quaonos Schema ST4 example templates prone to XSS	14 Dec 202208:17	–	vulnrichment

NVD

Node

weidmueller 19_iot_md01_lan_h4_s0011_firmwareMatch-

AND

weidmueller 19_iot_md01_lan_h4_s0011Match-

Node

weidmueller fp_iot_md01_4eu_s2_00000_firmwareMatch-

AND

weidmueller fp_iot_md01_4eu_s2_00000Match-

Node

weidmueller fp_iot_md01_lan_s2_00000_firmwareMatch-

AND

weidmueller fp_iot_md01_lan_s2_00000Match-

Node

weidmueller fp_iot_md01_lan_s2_00011_firmwareMatch-

AND

weidmueller fp_iot_md01_lan_s2_00011Match-

Node

weidmueller fp_iot_md02_4eu_s3_00000_firmwareMatch-

AND

weidmueller fp_iot_md02_4eu_s3_00000Match-

Node

weidmueller iot-gw30_firmwareRange≤1.16.0

AND

weidmueller iot-gw30Match-

Node

weidmueller iot-gw30-4g-eu_firmwareRange≤1.16.0

AND

weidmueller iot-gw30-4g-euMatch-

Node

weidmueller uc20-wl2000-ac_firmwareRange≤1.16.0

AND

weidmueller uc20-wl2000-acMatch-

Node

weidmueller uc20-wl2000-iot_firmwareRange≤1.16.0

AND

weidmueller uc20-wl2000-iotMatch-

Source	Link
cert	www.cert.vde.com/de/advisories/VDE-2022-056/

21 Nov 2024 07:18Current

CVSS 3.16.1

EPSS0.0019

quanos schema st4 javascript injection remote attacker existing sessions web services execute scripts bootstrap 2019 bootstrap 2021 bootstrap 2022 cve-2022-3073