PT-2022-28045 · Myapnea · Myapnea

CVE-2022-4731 · Published 2022-12-25 · Updated 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions myapnea versions up to 29.0.x

Description A problematic issue was found in the Title Handler component, leading to cross site scripting. The manipulation can be launched remotely.

Recommendations For versions up to 29.0.x, upgrade to version 29.1.0 to address this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4731

Affected Products

Myapnea

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4731.json · Exploit
• https://github.com/myapnea/myapnea.org/commit/99934258530d761bd5d09809bfa6c14b598f8d18 · Patch
• https://github.com/myapnea/myapnea.org/releases/tag/v29.1.0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-4731 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4731 · Vendor Advisory
• https://t.me/cvenotify/40647 · Telegram Post
• https://vuldb.com/?id.216750 · Note
• https://vuldb.com/?ctiid.216750 · Note