CVE-2022-25929

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting (XSS) due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/joewalnes/smoothie/commit/8e0920d50da82f4b6e605d56f41b69fbb9606a98	Patch Third Party Advisory
https://github.com/joewalnes/smoothie/pull/147	Patch Third Party Advisory
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-3177369	Exploit Third Party Advisory
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-3177368	Exploit
https://security.snyk.io/vuln/SNYK-JS-SMOOTHIE-3177364	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:smoothiecharts:smoothie_charts:*:*:*:*:*:node.js:*:*

History

No history.

Information

Published : 2022-12-21 05:15

Updated : 2024-02-28 19:51

NVD link : CVE-2022-25929

Mitre link : CVE-2022-25929

CVE.ORG link : CVE-2022-25929

JSON object : View

Products Affected

smoothiecharts

smoothie_charts

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2022-25929", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "report@snyk.io", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "published": "2022-12-21T05:15:11.410", "references": [{"url": "https://github.com/joewalnes/smoothie/commit/8e0920d50da82f4b6e605d56f41b69fbb9606a98", "tags": ["Patch", "Third Party Advisory"], "source": "report@snyk.io"}, {"url": "https://github.com/joewalnes/smoothie/pull/147", "tags": ["Patch", "Third Party Advisory"], "source": "report@snyk.io"}, {"url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-3177369", "tags": ["Exploit", "Third Party Advisory"], "source": "report@snyk.io"}, {"url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-3177368", "tags": ["Exploit"], "source": "report@snyk.io"}, {"url": "https://security.snyk.io/vuln/SNYK-JS-SMOOTHIE-3177364", "tags": ["Exploit", "Third Party Advisory"], "source": "report@snyk.io"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting (XSS) due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties."}, {"lang": "es", "value": "El paquete Smoothie de 1.31.0 y anteriores a 1.36.1 es vulnerable a Cross-site Scripting (XSS) debido a una sanitizaci\u00f3n inadecuada de la entrada del usuario en las propiedades StrokeStyle y TooltipLabel. Explotar esta vulnerabilidad es posible cuando el usuario puede controlar estas propiedades."}], "lastModified": "2022-12-27T22:43:39.123", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:smoothiecharts:smoothie_charts:*:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "3BE4EA19-8F32-45EB-9558-CBABCAFEDF0F", "versionEndExcluding": "1.36.1", "versionStartIncluding": "1.31.0"}], "operator": "OR"}]}], "sourceIdentifier": "report@snyk.io"}