PT-2022-27410

CVE-2022-4513

Published

2022-12-15

Updated

2022-12-20

Description by

CVSS 3.1

3.5

Low

MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions European Environment Agency eionet.contreg versions prior to 2022-06-27T0948

Description A problematic issue has been found in the European Environment Agency eionet.contreg, affecting some unknown processing. The manipulation of the searchTag/resourceUri argument leads to cross-site scripting. The attack can be initiated remotely.

Recommendations For versions prior to 2022-06-27T0948, upgrade to version 2022-06-27T0948 to address this issue. As a temporary workaround, consider restricting the use of the searchTag/resourceUri argument until the upgrade is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Vskiadas90

Vendors

Affected products

Weakness enumeration

CWE-707: Improper Neutralization

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers