PT-2022-27448 · Vexim2 · Vexim2

Rimas-Kudelis · Published 2022-12-15 · Updated 2024-01-25 · CVE-2022-4523

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions vexim2 (affected versions not specified)

Description A vulnerability has been found in vexim2, affecting some unknown processing, which leads to cross site scripting. The attack may be initiated remotely.

Recommendations To fix this issue, it is recommended to apply a patch with the name 21c0a60d12e9d587f905cd084b2c70f9b1592065.

Fix

Improper Neutralization

XSS

Weakness Enumeration

CWE-707

CWE-79

Related Identifiers

CVE-2022-4523

Affected Products

Vexim2

References · 7

• https://github.com/vexim/vexim2/pull/274 · Patch
• https://github.com/vexim/vexim2/commit/21c0a60d12e9d587f905cd084b2c70f9b1592065 · Patch
• https://osv.dev/vulnerability/CVE-2022-4523 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4523 · Security Note
• https://t.me/cvenotify/40000 · Telegram Post
• https://vuldb.com/?id.215903 · Note
• https://t.me/cibsecurity/54652 · Telegram Post