PT-2023-15613 · Yui2 · Yui2

Ryan412 · Publicado 2023-01-02 · Atualizado 2024-08-03 · CVE-2022-48197

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions YUI2 (affected versions not specified)

Description Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component, and the YUI Javascript library overall are not affected. This issue only affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2022-48197

Produtos afetados

Yui2

Referências · 15

• 🔥 https://exploit-db.com/exploits/51198 · Exploit
• 🔥 https://github.com/ryan412/CVE-2022-48197/blob/main/README.md · Exploit
• 🔥 https://github.com/ryan412/CVE-2022-48197 · Exploit
• https://github.com/yui/yui2/tags · Nota
• https://github.com/yui/yui2/blob/yui2-2.8.2-8/sandbox/treeview/inc-rightbar.php · Nota
• https://ubuntu.com/security/CVE-2022-48197 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-48197 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48197 · Aviso do Fabricante
• https://t.me/cvenotify/41109 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2022-48197 · Nota de Segurança
• https://t.me/cibsecurity/55739 · Publicação no Telegram
• https://t.me/cvenotify/88788 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-48197 · Aviso do Fabricante
• http://packetstormsecurity.com/files/171633/Yahoo-User-Interface-TreeView-2.8.2-Cross-Site-Scripting.html · Nota
• https://literatejava.com/security/is-it-really-a-cve-reported-xss-in-yui-2-8-2 · Nota