PT-2022-27666 · Unknown · Boston Sleep Slice

Published 2022-12-17 · Updated 2024-05-17 · CVE-2022-4588

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Boston Sleep slice versions up to 84.1.x Boston Sleep slice versions up to 84.2.0

Description A vulnerability was found in the component Layout Handler, which can lead to cross site scripting. The manipulation can be launched remotely. It is recommended to upgrade the affected component.

Recommendations For Boston Sleep slice versions up to 84.1.x, upgrade to version 84.2.0 to address this issue. For Boston Sleep slice versions up to 84.2.0, upgrade to version 85.0.0 to address this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4588

Affected Products

Boston Sleep Slice

References · 7

• https://github.com/sleepepi/slice/commit/6523bb17d889e2ab13d767f38afefdb37083f1d0 · Patch
• https://osv.dev/vulnerability/CVE-2022-4588 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4588 · Security Note
• https://github.com/sleepepi/slice/releases/tag/v84.2.0 · Note
• https://t.me/cibsecurity/54803 · Telegram Post
• https://vuldb.com/?id.216174 · Note
• https://t.me/cvenotify/40608 · Telegram Post