Lucene search

GoogleOSV:CVE-2022-3193

HistorySep 28, 2022 - 7:15 p.m.

CVE-2022-3193

2022-09-2819:15:09

Google

osv.dev

cve-2022-3193

html injection

cross-site scripting

ovirt-engine

windows service accounts

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine. A parameter “error_description” fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages.

CPENameOperatorVersion
ovirt-engineeqovirt-engine-3.5.0_alpha1
ovirt-engineeqovirt-engine-3.6.0_alpha3
ovirt-engineeqovirt-engine-4.2.0_beta1
ovirt-engineeqovirt-engine-4.2.1
ovirt-engineeqovirt-engine-4.1.0_beta1
ovirt-engineeqovirt-engine-4.2.1.3
ovirt-engineeqovirt-engine-4.3.0_alpha
ovirt-engineeqovirt-engine-3.3_beta1
ovirt-engineeqovirt-engine-3.6.0_qa2
ovirt-engineeqovirt-engine-3.6.0_alpha1.1

Name	Operator	Version
ovirt-engine	eq	ovirt-engine-3.5.0_alpha1
ovirt-engine	eq	ovirt-engine-3.6.0_alpha3
ovirt-engine	eq	ovirt-engine-4.2.0_beta1
ovirt-engine	eq	ovirt-engine-4.2.1
ovirt-engine	eq	ovirt-engine-4.1.0_beta1
ovirt-engine	eq	ovirt-engine-4.2.1.3
ovirt-engine	eq	ovirt-engine-4.3.0_alpha
ovirt-engine	eq	ovirt-engine-3.3_beta1
ovirt-engine	eq	ovirt-engine-3.6.0_qa2
ovirt-engine	eq	ovirt-engine-3.6.0_alpha1.1

Rows per page:

1-10 of 371

References

bugzilla.redhat.com/show_bug.cgi?id=2126353

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for OSV:CVE-2022-3193