PT-2022-3569 · Unknown +4 · Action View +4

🗓️ 27 Apr 2022 00:00:00Reported by Positive TechnologiesType

Cross site scripting in Action View tag helpers due to untrusted attribute keys; upgrade to fixed versions or escape input.

Reporter	Title	Published	Views	Family All 1371
0day.today	PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit	15 Oct 202300:00	–	zdt
0day.today	Apache Commons Text 1.9 Remote Code Execution Exploit	21 Jan 202400:00	–	zdt
Prion	Design/Logic Flaw	9 Feb 202320:15	–	prion
Prion	Design/Logic Flaw	20 Nov 202309:15	–	prion
Prion	Cross site scripting	11 Sep 202016:15	–	prion
Prion	Cross site request forgery (csrf)	2 Jul 202019:15	–	prion
Prion	Cross site request forgery (csrf)	19 Jun 202018:15	–	prion
Prion	Denial of service	2 Jul 202019:15	–	prion
Prion	Input validation	11 Feb 202118:15	–	prion
Prion	Design/Logic Flaw	27 May 202112:15	–	prion

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/torchserver_cve_2023_43654.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_commons_text4shell.rb
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2022-27777.yml
github	www.github.com/karthikuj/cve-2022-42889-text4shell-docker
github	www.github.com/kljunowsky/CVE-2022-42889-text4shell
github	www.github.com/tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE
github	www.github.com/ClickCyber/cve-2022-42889
github	www.github.com/SeanWrightSec/CVE-2022-42889-PoC
github	www.github.com/HKirito/CVE-2022-33980
github	www.github.com/cxzero/CVE-2022-42889-text4shell

27 Jul 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 26.4 - 7.5

CVSS 3.19.8

EPSS0.99931

SSVC