Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2022-30690
HistoryAug 22, 2022 - 7:15 p.m.

CVE-2022-30690

2022-08-2219:15:10
Google
osv.dev
5
cross-site scripting
wwbn avideo
http request
arbitrary javascript execution
image403 functionality

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON

A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.

Related

cve 1
cvelist 1
nvd 1
talos 1
prion 1
talosblog 1
cve
cve
CVE-2022-30690
2022-08-22 19:15:10
cvelist
cvelist
CVE-2022-30690
2022-08-22 18:24:49
nvd
nvd
CVE-2022-30690
2022-08-22 19:15:10
talos
talos
WWBN AVideo image403 cross-site scripting (XSS) vulnerability
2022-08-16 00:00:00
prion
prion
Cross site scripting
2022-08-22 19:15:00
talosblog
talosblog
Vulnerability Spotlight: Vulnerabilities in WWBN AVideo web app could lead to command injection, authentication bypass
2022-08-16 15:54:00

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON
Related for OSV:CVE-2022-30690
cve1cvelist1nvd1talos1prion1talosblog1