Lucene search

K
cveMitreCVE-2022-45758
HistoryDec 12, 2022 - 3:15 a.m.

CVE-2022-45758

2022-12-1203:15:09
CWE-79
mitre
web.nvd.nist.gov
25
cve-2022-45758
sens v1.0
cross site scripting
xss
com.liuyanzhao.sens.web.controller.admin
getregister
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

25.0%

SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister.

Affected configurations

Nvd
Node
sens_projectsensMatch-
VendorProductVersionCPE
sens_projectsens-cpe:2.3:a:sens_project:sens:-:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

25.0%

Related for CVE-2022-45758