PT-2022-15837 · Unknown · Openlibrary

Cdrini · Published 2022-06-22 · Updated 2023-03-04 · CVE-2022-23081

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions openlibrary versions deploy-2016-07-0 through deploy-2021-12-22

Description The issue is related to Reflected XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For openlibrary versions deploy-2016-07-0 through deploy-2021-12-22, update to a version that is not within the specified range to resolve the issue. As a temporary workaround, consider implementing additional security measures to minimize the risk of Reflected XSS exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-23081

Affected Products

Openlibrary

References · 6

• 🔥 https://mend.io/vulnerability-database/CVE-2022-23081 · Exploit
• https://github.com/internetarchive/openlibrary/pull/6597/commits/5460c8e8b517ef83c6a3b33654ba43ef0cbf051e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-23081 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23081 · Vendor Advisory
• https://t.me/cibsecurity/44955 · Telegram Post
• https://t.me/cvenotify/32014 · Telegram Post