PT-2023-14714 · Debian · Debian

Publicado 2022-01-01 · Atualizado 2025-09-25 · CVE-2022-45592

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The issue involves multiple problems: Server Side Request Forgery (SSRF), persistent Cross-site Scripting (XSS), and a File upload vulnerability. SSRF allows an attacker to trick the server into making requests to unintended locations, potentially leaking sensitive information or enabling unauthorized actions. Persistent XSS involves injecting malicious scripts into a website, which are then executed by other users, potentially leading to session hijacking or other malicious activities. The File upload vulnerability could allow an attacker to upload malicious files to the server, potentially leading to code execution or other security issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2022-45592

Produtos afetados

Debian

Referências · 5

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-45592 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-45592 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2022-45592 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2022-45592 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2022-45592 · Aviso do Fabricante