CoreCVE
Back

MEDIUM

Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket

Published Jul 27, 2022

Description

Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 27, 2022
Updated Aug 3, 2024
Reserved Jun 19, 2022
Link CVE-2022-34009
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-34009
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-34009
ENISA EUVD
Assigner mitre
Published Jul 27, 2022
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-37042
EUVD-2022-37042