CVE-2022-0705 - Cross-site Scripting (XSS) - Stored in pimcore/pimcore

MEDIUM

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Published Mar 16, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.55%

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<10.4.0

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1586		Advisory
https://github.com/advisories/GHSA-xmq3-hgjx-6997		Advisory
https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9		x_refsource_MISCPatchThird Party Advisory
https://github.com/pimcore/pimcore/pull/11447
https://huntr.dev/bounties/0e1b6836-e5b5-4e47-b9ab-2f6a4790ee7b		x_refsource_CONFIRMExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0705