CVE-2022-4347 - xiandafu beetl-bbs WebUtils.java cross site scripting

Back Back to CVE browser

MEDIUM

xiandafu beetl-bbs WebUtils.java cross site scripting

Published Dec 8, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.40%

Description

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215107.

Affected products

Vendor Xiandafu Product Beetl-Bbs Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Xiandafu

Beetl-Bbs

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-707

References (2)

https://gitee.com/xiandafu/beetl-bbs/issues/I5XD5O
ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.215107
Third Party Advisory

Link	Providers	Tags
https://gitee.com/xiandafu/beetl-bbs/issues/I5XD5O		ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.215107		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Dec 8, 2022

Updated Apr 15, 2025

Reserved Dec 8, 2022

Link CVE-2022-4347

CISA Vulnrichment

Updated Apr 14, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-4347

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-4347