CVE-2022-4585lowCWE-707

CVE-2022-4585: low-severity vulnerability in Opencaching Deutschland oc-server3

Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting

Published · Updated

Follow this CVE+ Monitor oc-server3

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.5epss 0.5%
A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. This affects an unknown part of the file htdocs/templates2/ocstyle/start.tpl of the component Cookie Handler. The manipulation of the argument usercountryCode leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is c720f2777a452186c67ef30db3679dd409556544. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216171.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
Opencaching Deutschland · oc-server3
Related CVEs — Opencaching Deutschland oc-server3

In the same product, most dangerous first.

CVE-2022-4514LOWOpencaching Deutschland oc-server3 varset.inc.php cross site scriptingEPSS 0.6%CVE-2022-4586LOWOpencaching Deutschland oc-server3 Cachelist cachelists.tpl cross site scriptingEPSS 0.5%CVE-2022-4587MEDIUMOpencaching Deutschland oc-server3 Login Page login.tpl cross site scriptingEPSS 0.5%