Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-4556 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-15T13:03:25.339Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Alinto Products: SOGo Problem Types: CWE-707 Description: A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function _migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting. The attack may be launched remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is efac49ae91a4a325df9931e78e543
motely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is efac49ae91a4a325df9931e78e543f707a0f8e5e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215960. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Alinto/sogo/commit/efac49ae91a4a325df9931e78e543f707a0f8e5e - https://github.com/Alinto/sogo/releases/tag/SOGo-5.8.0 - https://vuldb.com/?id.215960
CVE ID: CVE-2022-4557 State: PUBLISHED Published: 2023-02-09T10:50:03.914Z Last Updated: 2025-03-24T18:30:49.630Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Group Arge Energy and Control Systems Products: Smartpower Web Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.This issue affects Smartpower Web: before 23.01.01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0066
CVE ID: CVE-2022-4558 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-15T13:03:15.089Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Alinto Products: SOGo Problem Types: CWE-707 Description: A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3. It is recommended to
0 is able to address this issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3. It is recommended to upgrade the affected component. The identifier VDB-215961 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Alinto/sogo/releases/tag/SOGo-5.8.0 - https://github.com/Alinto/sogo/commit/1e0f5f00890f751e84d67be4f139dd7f00faa5f3 - https://vuldb.com/?id.215961
CVE ID: CVE-2022-4559 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-15T13:03:00.183Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: INEX Products: IPX-Manager Problem Types: CWE-707 Description: A vulnerability was found in INEX IPX-Manager up to 6.2.0. It has been declared as problematic. This vulnerability affects unknown code of the file resources/views/customer/list.foil.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.3.0 is able to address this issue. The name of the patch is bc9b14c6f70cccdb89b559e8bc3a7318bfe9c243. It is recommended to upgrade the affected com
issue. The name of the patch is bc9b14c6f70cccdb89b559e8bc3a7318bfe9c243. It is recommended to upgrade the affected component. VDB-215962 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/inex/IXP-Manager/commit/bc9b14c6f70cccdb89b559e8bc3a7318bfe9c243 - https://github.com/inex/IXP-Manager/releases/tag/v6.3.0 - https://vuldb.com/?id.215962
CVE ID: CVE-2022-4560 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-15T13:02:49.355Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: Joget Problem Types: CWE-79 Description: A vulnerability was found in Joget up to 7.0.31. It has been rated as problematic. This issue affects the function getInternalJsCssLib of the file wflow-core/src/main/java/org/joget/plugin/enterprise/UniversalTheme.java of the component wflow-core. The manipulation of the argument key leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 7.0.32 is able to address this issue. The name of the patch is ecf8be8f6f0cb
be initiated remotely. Upgrading to version 7.0.32 is able to address this issue. The name of the patch is ecf8be8f6f0cb725c18536ddc726d42a11bdaa1b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-215963. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.215963 - https://github.com/jogetworkflow/jw-community/commit/ecf8be8f6f0cb725c18536ddc726d42a11bdaa1b - https://github.com/jogetworkflow/jw-community/releases/tag/7.0.32
CVE ID: CVE-2022-4561 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-15T13:02:39.897Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: SemanticDrilldown Extension Problem Types: CWE-707 Description: A vulnerability classified as problematic has been found in SemanticDrilldown Extension. Affected is the function printFilterLine of the file includes/specials/SDBrowseDataPage.php of the component GET Parameter Handler. The manipulation of the argument value leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 6e18cf740a4548166c1d95f6d3a28541d298a3aa. It is recommended
ible to launch the attack remotely. The name of the patch is 6e18cf740a4548166c1d95f6d3a28541d298a3aa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215964. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wikimedia/mediawiki-extensions-SemanticDrilldown/commit/6e18cf740a4548166c1d95f6d3a28541d298a3aa - https://vuldb.com/?id.215964
CVE ID: CVE-2022-4562 State: PUBLISHED Published: 2023-02-13T14:32:34.136Z Last Updated: 2025-03-20T20:44:31.746Z Vendors: Unknown Products: Meks Flexible Shortcodes Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Meks Flexible Shortcodes WordPress plugin before 1.3.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2013d79b-e9f6-4a5
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2013d79b-e9f6-4a5a-b421-e840a3bae063
CVE ID: CVE-2022-4563 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-15T13:02:30.123Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Freedom of the Press Products: SecureDrop Problem Types: CWE-59 Description: A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is some unknown functionality of the file gpg-agent.conf. The manipulation leads to symlink following. Local access is required to approach this attack. The name of the patch is b0526a06f8ca713cce74b63e00d3730618d89691. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is
cce74b63e00d3730618d89691. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215972. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/freedomofpress/securedrop/pull/6704 - https://github.com/freedomofpress/securedrop/commit/b0526a06f8ca713cce74b63e00d3730618d89691 - https://vuldb.com/?id.215972 - https://github.com/freedomofpress/securedrop/compare/2.5.0...2.5.1 - https://securedrop.org/news/2_5_1-security-advisory/
CVE ID: CVE-2022-4564 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-15T13:02:19.690Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: University of Central Florida Products: Materia Problem Types: CWE-352 Description: A vulnerability classified as problematic has been found in University of Central Florida Materia up to 9.0.0. This affects the function before of the file fuel/app/classes/controller/api.php of the component API Controller. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 9.0.1-alpha1 is able to address this issue. The name of the patch is af2
tiate the attack remotely. Upgrading to version 9.0.1-alpha1 is able to address this issue. The name of the patch is af259115d2e8f17068e61902151ee8a9dbac397b. It is recommended to upgrade the affected component. The identifier VDB-215973 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.215973 - https://github.com/ucfopen/Materia/pull/1371 - https://github.com/ucfopen/Materia/commit/af259115d2e8f17068e61902151ee8a9dbac397b - https://github.com/ucfopen/Materia/releases/tag/v9.0.1-alpha1
CVE ID: CVE-2022-4565 State: PUBLISHED Published: 2022-12-16T00:00:00 Last Updated: 2024-08-03T01:41:45.728Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Dromara Products: HuTool Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.8.11 is able to address this issue. It is recommended to upgrade the affected component. VDB-215974 is the
to version 5.8.11 is able to address this issue. It is recommended to upgrade the affected component. VDB-215974 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dromara/hutool/issues/2797 - https://vuldb.com/?id.215974
CVE ID: CVE-2022-4566 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-15T13:01:58.575Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: y_project Products: RuoYi Problem Types: CWE-707 Description: A vulnerability, which was classified as critical, has been found in y_project RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b40. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215975. Additional Analyst Notes
apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215975. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/luelueking/ruoyi-4.7.5-vuln-poc - https://gitee.com/y_project/RuoYi/issues/I65V2B - https://gitee.com/y_project/RuoYi/commit/167970e5c4da7bb46217f576dc50622b83f32b40 - https://vuldb.com/?id.215975
CVE ID: CVE-2022-4567 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-14T18:02:23.919Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-284 Description: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1ac677c4-ec0a-4788-9465-51d9b6bd8fd2 - https://github.com/openemr/openemr/commit/953cb84dfd55fee9d5296668ec7fdb8bf25bcea4
CVE ID: CVE-2022-4568 State: PUBLISHED Published: 2023-05-01T14:36:25.547Z Last Updated: 2025-01-30T15:24:07.736Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Lenovo System Update Problem Types: CWE-276 Description: A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-103545
CVE ID: CVE-2022-4569 State: PUBLISHED Published: 2023-06-05T20:59:26.019Z Last Updated: 2025-01-08T16:27:54.836Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool Problem Types: CWE-276 Description: A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-103544
CVE ID: CVE-2022-4570 State: PUBLISHED Published: 2023-01-23T14:31:37.137Z Last Updated: 2025-04-02T15:44:11.656Z Vendors: Unknown Products: Top 10 Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a2483ecf-42a6-470a-b965-4e05069d1cef
CVE ID: CVE-2022-4571 State: PUBLISHED Published: 2023-01-16T15:37:52.001Z Last Updated: 2025-04-04T18:20:16.741Z Vendors: Unknown Products: Seriously Simple Podcasting Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Seriously Simple Podcasting WordPress plugin before 2.19.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/128b150b-3
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/128b150b-3950-4cc5-b46a-5707f7a0df00
CVE ID: CVE-2022-4572 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:01:40.705Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: unspecified Products: UBI Reader Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of the component UBIFS File Handler. The manipulation leads to path traversal. The attack may be launched remotely. Upgrading to version 0.8.5 is able to address this issue. The name of the patch is d5d68e6b1b9f7070c29df5f67fc060f579ae9139
rading to version 0.8.5 is able to address this issue. The name of the patch is d5d68e6b1b9f7070c29df5f67fc060f579ae9139. It is recommended to upgrade the affected component. VDB-216146 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jrspruitt/ubi_reader/pull/57 - https://github.com/jrspruitt/ubi_reader/releases/tag/v0.8.5-master - https://github.com/jrspruitt/ubi_reader/commit/d5d68e6b1b9f7070c29df5f67fc060f579ae9139 - https://vuldb.com/?id.216146
CVE ID: CVE-2022-4573 State: PUBLISHED Published: 2023-10-30T14:34:32.525Z Last Updated: 2024-09-06T20:41:56.986Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: ThinkPad X1 Fold Gen 1 Problem Types: CWE-20 Description: An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-106014
CVE ID: CVE-2022-4574 State: PUBLISHED Published: 2023-10-30T14:36:23.273Z Last Updated: 2024-09-09T16:51:57.365Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: ThinkPad BIOS Problem Types: CWE-20 Description: An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-106014
CVE ID: CVE-2022-4575 State: PUBLISHED Published: 2023-10-30T14:42:29.795Z Last Updated: 2024-08-03T01:41:45.637Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: ThinkPad BIOS Problem Types: CWE-276 Description: A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-106014
CVE ID: CVE-2022-4576 State: PUBLISHED Published: 2023-01-23T14:31:32.493Z Last Updated: 2025-04-02T15:51:42.409Z Vendors: Unknown Products: Easy Bootstrap Shortcode Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Bootstrap Shortcode WordPress plugin through 4.5.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0d679e0e-891b-44
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0d679e0e-891b-44f1-ac7f-a766e12956e0
CVE ID: CVE-2022-4577 State: PUBLISHED Published: 2023-02-06T19:59:09.665Z Last Updated: 2025-03-26T13:50:03.437Z Vendors: Unknown Products: Easy Testimonials Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Testimonials WordPress plugin before 3.9.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/85d9fad7-ba3d-4140-ae05-46262d2
ogram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/85d9fad7-ba3d-4140-ae05-46262d2643e6
CVE ID: CVE-2022-4578 State: PUBLISHED Published: 2023-01-16T15:38:08.777Z Last Updated: 2025-04-08T20:10:58.814Z Vendors: Unknown Products: Video Conferencing with Zoom Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fad16c68
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fad16c68-9f14-4866-b241-40468fb71494
CVE ID: CVE-2022-4579 State: REJECTED Published: N/A Last Updated: 2022-12-20T00:00:00 Description: No description available.
CVE ID: CVE-2022-4580 State: PUBLISHED Published: 2023-02-13T14:32:31.733Z Last Updated: 2025-03-20T20:06:56.287Z Vendors: Unknown Products: Twenty20 Image Before-After Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Twenty20 Image Before-After WordPress plugin through 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e54804c7-68a9-4c4c-94f9-1c3c9b97e8ca
CVE ID: CVE-2022-4581 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:01:29.829Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: 1j01 Products: mind-map Problem Types: CWE-707 Description: A vulnerability was found in 1j01 mind-map and classified as problematic. This issue affects some unknown processing of the file app.coffee. The manipulation of the argument html leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 9617e6084dfeccd92079ab4d7f439300a4b24394. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216167. Additional Anal
ended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216167. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/1j01/mind-map/commit/9617e6084dfeccd92079ab4d7f439300a4b24394 - https://vuldb.com/?id.216167
CVE ID: CVE-2022-4582 State: PUBLISHED Published: 2022-12-17T00:00:00.000Z Last Updated: 2025-04-15T13:01:22.373Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: starter-public-edition-4 Problem Types: CWE-707 Description: A vulnerability was found in starter-public-edition-4 up to 4.6.10. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 4.6.11 is able to address this issue. The name of the patch is 2606983c20f6ea3430ac4b36b3d2e88aafef45da. It is recommended to upgrade the affected component. The identif
the patch is 2606983c20f6ea3430ac4b36b3d2e88aafef45da. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216168. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ivantcholakov/starter-public-edition-4/commit/2606983c20f6ea3430ac4b36b3d2e88aafef45da - https://github.com/ivantcholakov/starter-public-edition-4/releases/tag/v4.6.11 - https://vuldb.com/?id.216168