PT-2022-27441 · Unknown · Calendarxp

Published 2022-12-15 · Updated 2022-12-20 · CVE-2022-4522

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CalendarXP versions up to 10.0.1

Description A vulnerability was found in CalendarXP, affecting unknown code and leading to cross site scripting. The attack can be initiated remotely. Upgrading to version 10.0.2 is able to address this issue.

Recommendations For CalendarXP versions up to 10.0.1, upgrade to version 10.0.2 to address the issue.

Fix

Improper Neutralization

Weakness Enumeration

CWE-707

Related Identifiers

CVE-2022-4522

Affected Products

Calendarxp

References · 7

• https://github.com/victorwon/calendarxp/commit/e3715b2228ddefe00113296069969f9e184836da · Patch
• https://osv.dev/vulnerability/CVE-2022-4522 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4522 · Security Note
• https://github.com/victorwon/calendarxp/releases/tag/10.0.2 · Note
• https://t.me/cvenotify/40001 · Telegram Post
• https://vuldb.com/?id.215902 · Note
• https://t.me/cibsecurity/54649 · Telegram Post