Lucene search
HistorySep 13, 2022 - 3:15 p.m.
CVE-2022-36778
cve-2022-36778
html injection
javascript injection
security vulnerability
input validation
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.9%
insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.
Affected configurations
Node
syneleharmonyRange<11
Related
cve
cve
CVE-2022-36778
2022-09-13 15:15:08
prion
prion
Input validation
2022-09-13 15:15:00
cvelist
cvelist
CVE-2022-36778 Synel - eHarmony Stored XSS
2022-09-13 14:58:01
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.9%
Related for NVD:CVE-2022-36778