CVE-2022-4523
vexim2 cross site scripting
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability, which was classified as problematic, has been found in vexim2. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 21c0a60d12e9d587f905cd084b2c70f9b1592065. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215903.
Una vulnerabilidad fue encontrada en vexim2 y clasificada como problemática. Este problema afecta algún procesamiento desconocido. La manipulación conduce a Cross-Site Scripting. El ataque puede iniciarse de forma remota. El nombre del parche es 21c0a60d12e9d587f905cd084b2c70f9b1592065. Se recomienda aplicar un parche para solucionar este problema. El identificador asociado de esta vulnerabilidad es VDB-215903.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-12-15 CVE Reserved
- 2022-12-15 CVE Published
- 2024-07-07 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CWE-707: Improper Neutralization
CAPEC
References (2)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://github.com/vexim/vexim2/commit/21c0a60d12e9d587f905cd084b2c70f9b1592065 | 2024-01-25 | |
https://github.com/vexim/vexim2/pull/274 | 2024-01-25 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Virtual Exim Project Search vendor "Virtual Exim Project" | Virtual Exim 2 Search vendor "Virtual Exim Project" for product "Virtual Exim 2" | < 2022-01-23 Search vendor "Virtual Exim Project" for product "Virtual Exim 2" and version " < 2022-01-23" | - |
Affected
|