PT-2022-28045 · Myapnea · Myapnea

Published 2022-12-25 · Updated 2024-05-17 · CVE-2022-4731

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions myapnea versions up to 29.0.x

Description A problematic issue was found in the Title Handler component, leading to cross site scripting. The manipulation can be launched remotely.

Recommendations For versions up to 29.0.x, upgrade to version 29.1.0 to address this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4731

Affected Products

Myapnea

References · 7

• https://github.com/myapnea/myapnea.org/commit/99934258530d761bd5d09809bfa6c14b598f8d18 · Patch
• https://github.com/myapnea/myapnea.org/releases/tag/v29.1.0 · Patch
• https://osv.dev/vulnerability/CVE-2022-4731 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4731 · Security Note
• https://vuldb.com/?ctiid.216750 · Note
• https://vuldb.com/?id.216750 · Note
• https://t.me/cvenotify/40647 · Telegram Post