Lucene search

MitreCVE-2022-40440

HistoryOct 12, 2022 - 12:15 a.m.

CVE-2022-40440

2022-10-1200:15:10

CWE-79

mitre

web.nvd.nist.gov

cve-2022-40440

mxgraph

v4.2.2

xss

vulnerability

settooltips()

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

41.3%

JSON

mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function.

Affected configurations

Nvd

Node

jgraphmxgraphMatch4.2.2

VendorProductVersionCPE
jgraphmxgraph4.2.2cpe:2.3:a:jgraph:mxgraph:4.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jgraph	mxgraph	4.2.2	cpe:2.3:a:jgraph:mxgraph:4.2.2:::::::*

References

mxgraph.com

github.com/jgraph/mxgraph

github.com/SxB64/mxgraph-xss-vul/wiki

Social References

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

41.3%

JSON

Related for CVE-2022-40440