CVE-2022-4456
Low
Description
A vulnerability has been found in falling-fruit and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 15adb8e1ea1f1c3e3d152fc266071f621ef0c621. It is recommended to apply a patch to fix this issue. VDB-215446 is the identifier assigned to this vulnerability.
SeverityLow
CVSS3.5
Exploit probability—
ProductFallingfruit Falling-fruit
PublishedDec 13, 2022
First seenDec 13, 2022
Weakness typeCWE-707CWE-707
How to fix
Update
- fallingfruit falling-fruit2022-03-07 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fallingfruit falling-fruit | v < 2022-03-07 | 2022-03-07 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.