Lucene search
GoogleOSV:CVE-2022-37161HistoryAug 25, 2022 - 5:15 p.m.
CVE-2022-37161
2022-08-2517:15:08
Google
osv.dev
claroline 13.5.7
cross site scripting
svg
file upload
vulnerable software
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.0%
Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload.
Related
cvelist
cvelist
CVE-2022-37161
2022-08-25 16:21:28
prion
prion
Cross site scripting
2022-08-25 17:15:00
cve
cve
CVE-2022-37161
2022-08-25 17:15:08
nvd
nvd
CVE-2022-37161
2022-08-25 17:15:08
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.0%
Related for OSV:CVE-2022-37161