PT-2022-27648 · Unknown · Starter-Public-Edition-4

Published 2022-12-17 · Updated 2022-12-22 · CVE-2022-4582

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions starter-public-edition-4 versions up to 4.6.10

Description A vulnerability was found in the software, classified as problematic. It affects an unknown function and leads to cross site scripting. The manipulation can be launched remotely. Upgrading to version 4.6.11 addresses this issue.

Recommendations For starter-public-edition-4 versions up to 4.6.10, upgrade to version 4.6.11 to address the issue.

Fix

Improper Neutralization

Weakness Enumeration

CWE-707

Related Identifiers

CVE-2022-4582

Affected Products

Starter-Public-Edition-4

References · 7

• https://github.com/ivantcholakov/starter-public-edition-4/commit/2606983c20f6ea3430ac4b36b3d2e88aafef45da · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-4582 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4582 · Vendor Advisory
• https://github.com/ivantcholakov/starter-public-edition-4/releases/tag/v4.6.11 · Note
• https://t.me/cibsecurity/54806 · Telegram Post
• https://t.me/cvenotify/40426 · Telegram Post
• https://vuldb.com/?id.216168 · Note