PT-2023-15613 · Yui2 · Yui2

Ryan412 · Published 2023-01-02 · Updated 2024-08-03 · CVE-2022-48197

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions YUI2 (affected versions not specified)

Description Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component, and the YUI Javascript library overall are not affected. This issue only affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-48197

Affected Products

Yui2

References · 15

• 🔥 https://exploit-db.com/exploits/51198 · Exploit
• 🔥 https://github.com/ryan412/CVE-2022-48197/blob/main/README.md · Exploit
• 🔥 https://github.com/ryan412/CVE-2022-48197 · Exploit
• https://ubuntu.com/security/CVE-2022-48197 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48197 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48197 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48197 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48197 · Vendor Advisory
• https://github.com/yui/yui2/tags · Note
• https://github.com/yui/yui2/blob/yui2-2.8.2-8/sandbox/treeview/inc-rightbar.php · Note
• https://t.me/cvenotify/41109 · Telegram Post
• https://t.me/cibsecurity/55739 · Telegram Post
• https://t.me/cvenotify/88788 · Telegram Post
• http://packetstormsecurity.com/files/171633/Yahoo-User-Interface-TreeView-2.8.2-Cross-Site-Scripting.html · Note
• https://literatejava.com/security/is-it-really-a-cve-reported-xss-in-yui-2-8-2 · Note