CVE-2022-4513lowCWE-707

CVE-2022-4513: fallo de gravedad baja en European Environment Agency eionet.contreg

European Environment Agency eionet.contreg cross site scripting

Publicada el 15 dic 2022 · Actualizada el 15 abr 2025

Seguir esta CVE + Monitorear eionet.contreg

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3.5epss 0.6%

A vulnerability, which was classified as problematic, has been found in European Environment Agency eionet.contreg. This issue affects some unknown processing. The manipulation of the argument searchTag/resourceUri leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2022-06-27T0948 is able to address this issue. The name of the patch is a120c2153e263e62c4db34a06ab96a9f1c6bccb6. It is recommended to upgrade the affected component. The identifier VDB-215885 was assigned to this vulnerability.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Productos afectados

European Environment Agency · eionet.contreg

Referencias

https://github.com/eea/eionet.contreg/commit/a120c2153e263e62c4db34a06ab96a9f1c6bccb6 https://github.com/eea/eionet.contreg/releases/tag/2022-06-27T0948 https://vuldb.com/?id.215885