CVE-2022-4586lowCWE-707

CVE-2022-4586: falha de baixa gravidade em Opencaching Deutschland oc-server3

Opencaching Deutschland oc-server3 Cachelist cachelists.tpl cross site scripting

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar oc-server3

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.5%
A vulnerability classified as problematic was found in Opencaching Deutschland oc-server3. This vulnerability affects unknown code of the file htdocs/templates2/ocstyle/cachelists.tpl of the component Cachelist Handler. The manipulation of the argument name_filter/by_filter leads to cross site scripting. The attack can be initiated remotely. The name of the patch is a9f79c7da78cd24a7ef1d298e6bc86006972ea73. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216172.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Opencaching Deutschland · oc-server3
CVEs relacionadas — Opencaching Deutschland oc-server3

No mesmo produto, das mais perigosas para as menos.

CVE-2022-4514LOWOpencaching Deutschland oc-server3 varset.inc.php cross site scriptingEPSS 0.6%CVE-2022-4585LOWOpencaching Deutschland oc-server3 Cookie start.tpl cross site scriptingEPSS 0.5%CVE-2022-4587MEDIUMOpencaching Deutschland oc-server3 Login Page login.tpl cross site scriptingEPSS 0.5%