CVE-2022-4523

A vulnerability, which was classified as problematic, has been found in vexim2. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 21c0a60d12e9d587f905cd084b2c70f9b1592065. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215903.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/vexim/vexim2/commit/21c0a60d12e9d587f905cd084b2c70f9b1592065	Patch Third Party Advisory
https://github.com/vexim/vexim2/pull/274	Issue Tracking Patch Third Party Advisory
https://vuldb.com/?id.215903	Permissions Required Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:virtual_exim_project:virtual_exim_2:*:*:*:*:*:*:*:*

History

25 Jan 2024, 20:40

Type	Values Removed	Values Added
CWE	~~CWE-707~~	CWE-79
CPE	cpe:2.3:a:virtual_exim_project:virtual_exim_2:-:::::::*	cpe:2.3:a:virtual_exim_project:virtual_exim_2::::::::

07 Nov 2023, 03:58

Type	Values Removed	Values Added
CWE	CWE-74 CWE-79

Information

Published : 2022-12-15 21:15

Updated : 2024-02-28 19:51

NVD link : CVE-2022-4523

Mitre link : CVE-2022-4523

CVE.ORG link : CVE-2022-4523

JSON object : View

Products Affected

virtual_exim_project

virtual_exim_2

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-707

Improper Neutralization

{"id": "CVE-2022-4523", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.1}]}, "published": "2022-12-15T21:15:12.933", "references": [{"url": "https://github.com/vexim/vexim2/commit/21c0a60d12e9d587f905cd084b2c70f9b1592065", "tags": ["Patch", "Third Party Advisory"], "source": "cna@vuldb.com"}, {"url": "https://github.com/vexim/vexim2/pull/274", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/?id.215903", "tags": ["Permissions Required", "Third Party Advisory"], "source": "cna@vuldb.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}, {"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-707"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability, which was classified as problematic, has been found in vexim2. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 21c0a60d12e9d587f905cd084b2c70f9b1592065. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215903."}, {"lang": "es", "value": "Una vulnerabilidad fue encontrada en vexim2 y clasificada como problem\u00e1tica. Este problema afecta alg\u00fan procesamiento desconocido. La manipulaci\u00f3n conduce a Cross-Site Scripting. El ataque puede iniciarse de forma remota. El nombre del parche es 21c0a60d12e9d587f905cd084b2c70f9b1592065. Se recomienda aplicar un parche para solucionar este problema. El identificador asociado de esta vulnerabilidad es VDB-215903."}], "lastModified": "2024-01-25T20:40:07.070", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:virtual_exim_project:virtual_exim_2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A99C9A61-3E9D-491F-A281-827B412ED68F", "versionEndExcluding": "2022-01-23"}], "operator": "OR"}]}], "sourceIdentifier": "cna@vuldb.com"}