PT-2022-28050 · Unknown · Venganzas Del Pasado

Poojaja48845736 · Published 2022-12-25 · Updated 2024-05-17 · CVE-2022-4736

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Venganzas del Pasado (affected versions not specified)

Description A vulnerability was found in Venganzas del Pasado and classified as problematic. The manipulation of the argument the title leads to cross site scripting. The attack may be launched remotely.

Recommendations To fix this issue, it is recommended to apply a patch with the name 62339b2ec445692c710b804bdf07aef4bd247ff7. As a temporary workaround, consider restricting the manipulation of the the title argument to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4736

Affected Products

Venganzas Del Pasado

References · 9

• https://github.com/jschwindt/Venganzas-del-Pasado/commit/62339b2ec445692c710b804bdf07aef4bd247ff7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-4736 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4736 · Vendor Advisory
• https://vuldb.com/?ctiid.216770 · Note
• https://vuldb.com/?id.216770 · Note
• https://t.me/cvenotify/41241 · Telegram Post
• https://t.me/cibsecurity/55320 · Telegram Post
• https://openbugbounty.org/reports/3022583 · Note
• https://t.me/cvenotify/40659 · Telegram Post