Lucene search
HistorySep 28, 2022 - 4:15 a.m.
CVE-2022-39053
heimavista rpage
insufficient filtering
platform url
unauthenticated
remote attacker
xss attack
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
49.2%
Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Affected configurations
Node
heimavistadark_horse_rpageRange<5.4.103
| Vendor | Product | Version | CPE |
|---|---|---|---|
| heimavista | dark_horse_rpage | * | cpe:2.3:a:heimavista:dark_horse_rpage:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-39053
2022-09-28 04:15:15
cvelist
cvelist
CVE-2022-39053 HEIMAVISTA INC. Rpage - Reflected XSS
2022-09-28 03:25:40
prion
prion
Cross site scripting
2022-09-28 04:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
49.2%
Related for NVD:CVE-2022-39053