Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-41905
HistoryNov 11, 2022 - 9:15 p.m.

Cross site scripting

2022-11-1121:15:00
PRIOn knowledge base
www.prio-n.com
1
wsgidav
webdav server
xss
vulnerability
patched
upgrade
version 4.1.0
workaround
configuration

0.001 Low

EPSS

Percentile

26.4%

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dir_browser.enable = False in the configuration.

CPENameOperatorVersion
wsgidavge3.0.0
wsgidavlt4.1.0

0.001 Low

EPSS

Percentile

26.4%