Lucene search
HistoryMar 27, 2023 - 4:15 p.m.
CVE-2022-48429
jetbrains hub
reflected xss
dashboards
cve-2022-48429
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
4.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.2%
In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible
Affected configurations
Node
jetbrainshubRange<2022.1.15583
ORjetbrainshubRange2022.2–2022.2.15572
ORjetbrainshubRange2022.3–2022.3.15573
Related
cve
cve
CVE-2022-48429
2023-03-27 16:15:07
cvelist
cvelist
CVE-2022-48429
2023-03-27 15:51:43
prion
prion
Cross site scripting
2023-03-27 16:15:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
4.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.2%
Related for NVD:CVE-2022-48429