CVE-2022-4522 - OpenCVE

A vulnerability classified as problematic was found in CalendarXP up to 10.0.1. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 10.0.2 is able to address this issue. The name of the patch is e3715b2228ddefe00113296069969f9e184836da. It is recommended to upgrade the affected component. VDB-215902 is the identifier assigned to this vulnerability.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Calendarxp	Calendarxp

Configuration 1 [-]

cpe:2.3:a:calendarxp:calendarxp:*:*:*:*:*:*:*:*

References

Link	Resource
https://github.com/victorwon/calendarxp/commit/e3715b2228ddefe00113296069969f9e184836da	Patch Third Party Advisory
https://github.com/victorwon/calendarxp/releases/tag/10.0.2	Third Party Advisory
https://vuldb.com/?id.215902	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: VulDB

Published: 2022-12-15T00:00:00

Updated: 2022-12-15T00:00:00

Reserved: 2022-12-15T00:00:00

Link: CVE-2022-4522

JSON object: View

NVD Information

Status : Modified

Published: 2022-12-15T21:15:12.853

Modified: 2023-11-07T03:58:04.040

Link: CVE-2022-4522

JSON object: View

Redhat Information

No data.

CWE

CWE-707

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:calendarxp:calendarxp:*:*:*:*:*:*:*:*", "matchCriteriaId": "979CC2AF-F128-4B4A-B192-8F08BBCBECEF", "versionEndIncluding": "10.0.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability classified as problematic was found in CalendarXP up to 10.0.1. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 10.0.2 is able to address this issue. The name of the patch is e3715b2228ddefe00113296069969f9e184836da. It is recommended to upgrade the affected component. VDB-215902 is the identifier assigned to this vulnerability."}, {"lang": "es", "value": "Una vulnerabilidad fue encontrada en CalendarXP hasta 10.0.1 y clasificada como problem\u00e1tica. Esta vulnerabilidad afecta a c\u00f3digo desconocido. La manipulaci\u00f3n conduce a Cross-Site Scripting. El ataque se puede iniciar de forma remota. La actualizaci\u00f3n a la versi\u00f3n 10.0.2 puede solucionar este problema. El nombre del parche es e3715b2228ddefe00113296069969f9e184836da. Se recomienda actualizar el componente afectado. VDB-215902 es el identificador asignado a esta vulnerabilidad."}], "id": "CVE-2022-4522", "lastModified": "2023-11-07T03:58:04.040", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}]}, "published": "2022-12-15T21:15:12.853", "references": [{"source": "cna@vuldb.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/victorwon/calendarxp/commit/e3715b2228ddefe00113296069969f9e184836da"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory"], "url": "https://github.com/victorwon/calendarxp/releases/tag/10.0.2"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory"], "url": "https://vuldb.com/?id.215902"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-707"}], "source": "cna@vuldb.com", "type": "Primary"}]}