CVE-2022-4728

2022-12-2700:00:00

ubuntu.com

0.001 Low

EPSS

Percentile

39.8%

JSON

A vulnerability has been found in Graphite Web and classified as
problematic. This vulnerability affects unknown code of the component
Cookie Handler. The manipulation leads to cross site scripting. The attack
can be initiated remotely. The exploit has been disclosed to the public and
may be used. The name of the patch is
2f178f490e10efc03cd1d27c72f64ecab224eb23. It is recommended to apply a
patch to fix this issue. VDB-216742 is the identifier assigned to this
vulnerability.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026992>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchgraphite-web< 1.0.2+debian-2ubuntu0.1~esm1UNKNOWN
ubuntu20.04noarchgraphite-web< 1.1.4-5ubuntu0.1UNKNOWN
ubuntu22.04noarchgraphite-web< 1.1.8-1ubuntu0.22.04.1UNKNOWN
ubuntu23.10noarchgraphite-web< anyUNKNOWN
ubuntu24.04noarchgraphite-web< anyUNKNOWN
ubuntu14.04noarchgraphite-web< 0.9.12+debian-3ubuntu0.1~esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchgraphite-web< 0.9.15+debian-1ubuntu0.1~esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	graphite-web	< 1.0.2+debian-2ubuntu0.1~esm1	UNKNOWN
ubuntu	20.04	noarch	graphite-web	< 1.1.4-5ubuntu0.1	UNKNOWN
ubuntu	22.04	noarch	graphite-web	< 1.1.8-1ubuntu0.22.04.1	UNKNOWN
ubuntu	23.10	noarch	graphite-web	< any	UNKNOWN
ubuntu	24.04	noarch	graphite-web	< any	UNKNOWN
ubuntu	14.04	noarch	graphite-web	< 0.9.12+debian-3ubuntu0.1~esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	graphite-web	< 0.9.15+debian-1ubuntu0.1~esm1	UNKNOWN