Lucene search
HistoryJan 23, 2023 - 10:15 p.m.
CVE-2022-40034
cve-2022-40034
cross-site scripting
rawchen blog-ssm
arbitrary code execution
notifyinfo parameter
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
24.8%
Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the ‘notifyInfo’ parameter.
Affected configurations
Node
javaweb_blog_projectjavaweb_blogMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| javaweb_blog_project | javaweb_blog | 1.0 | cpe:2.3:a:javaweb_blog_project:javaweb_blog:1.0:*:*:*:*:*:*:* |
References
Related
prion
prion
Cross site scripting
2023-01-23 22:15:00
cvelist
cvelist
CVE-2022-40034
2023-01-23 00:00:00
cve
cve
CVE-2022-40034
2023-01-23 22:15:11
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
24.8%
Related for NVD:CVE-2022-40034