Lucene search
HistoryDec 09, 2022 - 10:15 p.m.
CVE-2022-34297
cve-2022-34297
yii
yii2
gii
xss
security
vulnerability
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
23.5%
Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.
Affected configurations
Node
yiiframeworkgiiRange≤2.2.4yii2
| CPE | Name | Operator | Version |
|---|---|---|---|
| yiiframework:gii | yiiframework gii | le | 2.2.4 |
Related
cvelist
cvelist
CVE-2022-34297
2022-12-09 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2022-12-12 03:08:25
osv
osv
Yii2 Gii Cross-site Scripting vulnerability
2022-12-10 00:30:17
github
github
Yii2 Gii Cross-site Scripting vulnerability
2022-12-10 00:30:17
nvd
nvd
CVE-2022-34297
2022-12-09 22:15:10
prion
prion
Cross site scripting
2022-12-09 22:15:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
23.5%
Related for CVE-2022-34297