PT-2023-14714 · Debian · Debian

Published 2022-01-01 · Updated 2025-09-25 · CVE-2022-45592

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The issue involves multiple problems: Server Side Request Forgery (SSRF), persistent Cross-site Scripting (XSS), and a File upload vulnerability. SSRF allows an attacker to trick the server into making requests to unintended locations, potentially leaking sensitive information or enabling unauthorized actions. Persistent XSS involves injecting malicious scripts into a website, which are then executed by other users, potentially leading to session hijacking or other malicious activities. The File upload vulnerability could allow an attacker to upload malicious files to the server, potentially leading to code execution or other security issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-45592

Affected Products

Debian

References · 5

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-45592 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-45592 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45592 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-45592 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-45592 · Vendor Advisory