CVE-2022-4735

Low

Description

A vulnerability classified as problematic was found in asrashley dash-live. This vulnerability affects the function ready of the file static/js/media.js of the component DOM Node Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 24d01757a5319cc14c4aa1d8b53d1ab24d48e451. It is recommended to apply a patch to fix this issue. VDB-216766 is the identifier assigned to this vulnerability.

SeverityLow

CVSS3.5

Exploit probability—

ProductDash-live

PublishedDec 25, 2022

First seenDec 25, 2022

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update

dash-live_project dash-live2022-03-01 or later

Patches

github.com/asrashley/dash-live/commit/24d01757a5319cc14c4aa1d8b53d1ab24d48e451

Affected products

Product	Affected versions	Fixed in
dash-live_project dash-live	v < 2022-03-01	2022-03-01

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.