PT-2023-15917 · Nuxsmin · Syspass

·

CVE-2022-4930

·

Published

2023-03-06

·

Updated

2024-05-17

CVSS v2.0

4.0

Medium

VectorAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions nuxsmin sysPass versions up to 3.2.4
Description A problematic vulnerability was found in the URL Handler component, leading to cross-site scripting. The attack can be launched remotely.
Recommendations For versions up to 3.2.4, upgrade to version 3.2.5 to address this issue.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-4930

Affected Products

Syspass