CVE-2022-4585lowCWE-707

CVE-2022-4585: falha de baixa gravidade em Opencaching Deutschland oc-server3

Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar oc-server3

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.5%
A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. This affects an unknown part of the file htdocs/templates2/ocstyle/start.tpl of the component Cookie Handler. The manipulation of the argument usercountryCode leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is c720f2777a452186c67ef30db3679dd409556544. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216171.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Opencaching Deutschland · oc-server3
CVEs relacionadas — Opencaching Deutschland oc-server3

No mesmo produto, das mais perigosas para as menos.

CVE-2022-4514LOWOpencaching Deutschland oc-server3 varset.inc.php cross site scriptingEPSS 0.6%CVE-2022-4586LOWOpencaching Deutschland oc-server3 Cachelist cachelists.tpl cross site scriptingEPSS 0.5%CVE-2022-4587MEDIUMOpencaching Deutschland oc-server3 Login Page login.tpl cross site scriptingEPSS 0.5%