CVE-2022-43499

2022-12-0504:15:10

Google

osv.dev

stored xss

shirasagi

version 1.16.2

remote attacker

administrative privilege

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.2%

JSON

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

CPENameOperatorVersion
shirasagieq1.13.1
shirasagieq1.15.0-RC
shirasagieq1.13.2
shirasagieq1.16.1
shirasagieq0.5.0
shirasagieq1.12.1-RC
shirasagieq1.12.3-RC
shirasagieq1.4.0
shirasagieq1.9.0
shirasagieq1.6.0-RC

Name	Operator	Version
shirasagi	eq	1.13.1
shirasagi	eq	1.15.0-RC
shirasagi	eq	1.13.2
shirasagi	eq	1.16.1
shirasagi	eq	0.5.0
shirasagi	eq	1.12.1-RC
shirasagi	eq	1.12.3-RC
shirasagi	eq	1.4.0
shirasagi	eq	1.9.0
shirasagi	eq	1.6.0-RC