CVE-2022-34962

Sažetak

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module.

Reference

https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3
https://github.com/bypazs/CVE-2022-34962
https://www.openteknik.com/contact?channel=ossn
https://grimthereaperteam.medium.com/cve-2022-34962-ossn-6-3-lts-stored-xss-vulnerability-at-group-timeline-6ebe28dd6034
https://www.opensource-socialnetwork.org/

CVSS

Base:	5.4
Impact:	2.7
Exploitability:	2.3

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	-

Impact

Povjerljivost	Cjelovitost	Dostupnost
LOW	LOW	NONE

CVSS vektor

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Zadnje važnije ažuriranje

02-08-2022 - 15:09

Objavljeno

25-07-2022 - 18:23