PT-2022-27450 · Unknown · Sleepdata.Org

Published 2022-12-15 · Updated 2024-05-17 · CVE-2022-4525

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions National Sleep Research Resource sleepdata.org versions up to 59.0.0.rc

Description A vulnerability has been found in the National Sleep Research Resource sleepdata.org, which is classified as problematic. The manipulation of an unknown functionality leads to cross site scripting. The attack can be launched remotely.

Recommendations Upgrading to version 59.0.0 is able to address this issue. It is recommended to upgrade the affected component.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4525

Affected Products

Sleepdata.Org

References · 9

• https://github.com/nsrr/sleepdata.org/commit/da44a3893b407087829b006d09339780919714cd · Patch
• https://osv.dev/vulnerability/CVE-2022-4525 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4525 · Security Note
• https://github.com/nsrr/sleepdata.org/releases/tag/59.0.0.rc · Note
• https://t.me/cvenotify/45253 · Telegram Post
• https://t.me/cibsecurity/54656 · Telegram Post
• https://t.me/cvenotify/40602 · Telegram Post
• https://vuldb.com/?id.215905 · Note
• https://t.me/cvenotify/39998 · Telegram Post