CVE-2022-4875
CVSS V2 None
CVSS V3 None
Description
A vulnerability has been found in fossology and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument sql/VarValue leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 8e0eba001662c7eb35f045b70dd458a4643b4553. It is recommended to apply a patch to fix this issue. VDB-217426 is the identifier assigned to this vulnerability.
Overview
- CVE ID
- CVE-2022-4875
- Assigner
- cna@vuldb.com
- Vulnerability Status
- Analyzed
- Published Version
- 2023-01-04T22:15:09
- Last Modified Date
- 2023-01-11T01:50:28
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:linuxfoundation:fossology:*:*:*:*:*:*:*:* | 1 | OR | 2023-01-02 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-4875 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4875 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-01-04 22:17:19 | Added to TrackCVE | |||
| 2023-01-04 22:17:20 | Weakness Enumeration | new | ||
| 2023-01-04 23:14:48 | 2023-01-04T22:27:21 | CVE Modified Date | updated | |
| 2023-01-04 23:14:48 | Received | Awaiting Analysis | Vulnerability Status | updated |
| 2023-01-04 23:14:50 | CVSS V3 information | new | ||
| 2023-01-04 23:14:50 | CVSS V2 information | new | ||
| 2023-01-09 18:24:18 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |
| 2023-01-09 18:24:21 | CVSS V3 information | new | ||
| 2023-01-09 18:24:21 | CVSS V2 information | new | ||
| 2023-01-11 02:16:59 | 2023-01-11T01:50:28 | CVE Modified Date | updated | |
| 2023-01-11 02:16:59 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
| 2023-01-11 02:17:00 | CPE Information | updated | ||
| 2023-01-11 02:17:00 | CVSS V3 information | new | ||
| 2023-01-11 02:17:00 | CVSS V2 information | new |