Lucene search
GoogleOSV:CVE-2022-34870HistoryOct 25, 2022 - 5:15 p.m.
CVE-2022-34870
2022-10-2517:15:53
Google
osv.dev
3
apache geode
xss
pulse
cross-site scripting
web application
data injection
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
26.4%
Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.
Related
osv
osv
Apache Geode vulnerable to Cross-Site Scripting
2022-10-25 19:00:27
veracode
veracode
Cross-Site Scripting (XSS)
2022-10-26 05:04:04
github
github
Apache Geode vulnerable to Cross-Site Scripting
2022-10-25 19:00:27
nvd
nvd
CVE-2022-34870
2022-10-25 17:15:53
prion
prion
Cross site scripting
2022-10-25 17:15:00
cvelist
cvelist
cve
cve
CVE-2022-34870
2022-10-25 17:15:53
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
26.4%
Related for OSV:CVE-2022-34870