PT-2022-27410
CVE-2022-4513
·
تاريخ النشر
2022-12-15
·
تاريخ التحديث
2022-12-20
الوصف من
CVSS 3.1
3.5
منخفضةالمقاييسAV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
European Environment Agency eionet.contreg versions prior to 2022-06-27T0948
Description
A problematic issue has been found in the European Environment Agency eionet.contreg, affecting some unknown processing. The manipulation of the
searchTag/resourceUri argument leads to cross-site scripting. The attack can be initiated remotely.Recommendations
For versions prior to 2022-06-27T0948, upgrade to version 2022-06-27T0948 to address this issue. As a temporary workaround, consider restricting the use of the
searchTag/resourceUri argument until the upgrade is applied.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾