Design/Logic Flaw

2022-11-1515:15:00

PRIOn knowledge base

www.prio-n.com

common user interface component

html output

nvd

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).

CPENameOperatorVersion
bluespicege4.1.0
bluespicelt4.2.1
common_user_interfacege3.0.0
common_user_interfacelt3.0.5

Name	Operator	Version
bluespice	ge	4.1.0
bluespice	lt	4.2.1
common_user_interface	ge	3.0.0
common_user_interface	lt	3.0.5

References

en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-08