A vulnerability has been found in fossology and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument sql/VarValue leads to cross site scripting. The attack can be initiated remotely. The patch is identified as 8e0eba001662c7eb35f045b70dd458a4643b4553. It is recommended to apply a patch to fix this issue. VDB-217426 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/fossology/fossology/pull/2356 | Patch |
| https://vuldb.com/?id.217426 | Third Party Advisory |
| https://github.com/fossology/fossology/commit/8e0eba001662c7eb35f045b70dd458a4643b4553 | Patch |
| https://vuldb.com/?ctiid.217426 | Permissions Required |
Configurations
History
29 Oct 2023, 02:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://vuldb.com/?ctiid.217426 - Permissions Required | |
| CWE | CWE-79 |
20 Oct 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability has been found in fossology and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument sql/VarValue leads to cross site scripting. The attack can be initiated remotely. The patch is identified as 8e0eba001662c7eb35f045b70dd458a4643b4553. It is recommended to apply a patch to fix this issue. VDB-217426 is the identifier assigned to this vulnerability. | |
| CWE |
Information
Published : 2023-01-04 22:15
Updated : 2024-05-17 02:17
NVD link : CVE-2022-4875
Mitre link : CVE-2022-4875
JSON object : View
Products Affected
linuxfoundation
- fossology
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')