PT-2022-22460 · Unknown · Ossn Open Source Social Network

Published 2022-07-25 · Updated 2022-07-29 · CVE-2022-34964

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OSSN OPEN SOURCE SOCIAL NETWORK version 6.3 LTS

Description The issue is related to a stored cross-site scripting (XSS) vulnerability. This vulnerability is present in the SitePages module.

Recommendations For OSSN OPEN SOURCE SOCIAL NETWORK version 6.3 LTS, consider disabling the SitePages module until a patch is available to prevent potential exploitation of the stored cross-site scripting vulnerability.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-34964

Affected Products

Ossn Open Source Social Network

References · 7

• 🔥 https://grimthereaperteam.medium.com/ossn-6-3-lts-stored-xss-vulnerability-at-sitepages-ba91bbeccf1c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-34964 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34964 · Vendor Advisory
• https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3 · Note
• https://openteknik.com/contact?channel=ossn · Note
• https://opensource-socialnetwork.org · Note
• https://t.me/cibsecurity/46930 · Telegram Post