CVE-2022-4513
Low
Description
A vulnerability, which was classified as problematic, has been found in European Environment Agency eionet.contreg. This issue affects some unknown processing. The manipulation of the argument searchTag/resourceUri leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2022-06-27T0948 is able to address this issue. The name of the patch is a120c2153e263e62c4db34a06ab96a9f1c6bccb6. It is recommended to upgrade the affected component. The identifier VDB-215885 was assigned to this vulnerability.
SeverityLow
CVSS3.5
Exploit probability—
ProductEea Eionet Content Registry
PublishedDec 15, 2022
First seenDec 15, 2022
Weakness typeCWE-707CWE-707
How to fix
Update
- eea eionet_content_registry2022-06-27t0948 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eea eionet_content_registry | v < 2022-06-27t0948 | 2022-06-27t0948 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.