Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2022-48197
HistoryJan 02, 2023 - 12:00 a.m.

CVE-2022-48197

2023-01-0200:00:00
mitre
github.com
4
cve-2022-48197
yui2
cross-site scripting

AI Score

5.8

Confidence

High

EPSS

0.006

Percentile

78.8%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

AI Score

5.8

Confidence

High

EPSS

0.006

Percentile

78.8%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial