CVE-2022-4587
Medium
Description
A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipulation of the argument username leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 3296ebd61e7fe49e93b5755d5d7766d6e94a7667. It is recommended to apply a patch to fix this issue. The identifier VDB-216173 was assigned to this vulnerability.
SeverityMedium
CVSS4.3
Exploit probability—
ProductOc-server3
PublishedDec 17, 2022
First seenDec 17, 2022
Weakness typeCWE-707CWE-707
How to fix
Update
- oc-server3_project oc-server32022-09-04 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oc-server3_project oc-server3 | v < 2022-09-04 | 2022-09-04 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.