Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-23637

K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cross-Site-Scripting (XSS) vulnerability is present in the markdown editor used by the document abstract and markdown file preview. A specifically crafted anchor link can, if clicked, execute untrusted javascript actions, like retrieving user cookies. Version 0.33.1 includes a patch that allows discarding unsafe links.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.2%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 3.5
Products affected by CVE-2022-23637
  • K-Link » K-Box » Version: N/A
    cpe:2.3:a:k-link:k-box:-
  • K-Link » K-Box » Version: 0.19.0
    cpe:2.3:a:k-link:k-box:0.19.0
  • K-Link » K-Box » Version: 0.19.1
    cpe:2.3:a:k-link:k-box:0.19.1
  • K-Link » K-Box » Version: 0.20.0
    cpe:2.3:a:k-link:k-box:0.20.0
  • K-Link » K-Box » Version: 0.20.1
    cpe:2.3:a:k-link:k-box:0.20.1
  • K-Link » K-Box » Version: 0.21.0
    cpe:2.3:a:k-link:k-box:0.21.0
  • K-Link » K-Box » Version: 0.21.1
    cpe:2.3:a:k-link:k-box:0.21.1
  • K-Link » K-Box » Version: 0.21.2
    cpe:2.3:a:k-link:k-box:0.21.2
  • K-Link » K-Box » Version: 0.22.0
    cpe:2.3:a:k-link:k-box:0.22.0
  • K-Link » K-Box » Version: 0.23.0
    cpe:2.3:a:k-link:k-box:0.23.0
  • K-Link » K-Box » Version: 0.23.1
    cpe:2.3:a:k-link:k-box:0.23.1
  • K-Link » K-Box » Version: 0.23.2
    cpe:2.3:a:k-link:k-box:0.23.2
  • K-Link » K-Box » Version: 0.24.0
    cpe:2.3:a:k-link:k-box:0.24.0
  • K-Link » K-Box » Version: 0.24.1
    cpe:2.3:a:k-link:k-box:0.24.1
  • K-Link » K-Box » Version: 0.25.0
    cpe:2.3:a:k-link:k-box:0.25.0
  • K-Link » K-Box » Version: 0.25.1
    cpe:2.3:a:k-link:k-box:0.25.1
  • K-Link » K-Box » Version: 0.25.2
    cpe:2.3:a:k-link:k-box:0.25.2
  • K-Link » K-Box » Version: 0.25.3
    cpe:2.3:a:k-link:k-box:0.25.3
  • K-Link » K-Box » Version: 0.26.0
    cpe:2.3:a:k-link:k-box:0.26.0
  • K-Link » K-Box » Version: 0.27.0
    cpe:2.3:a:k-link:k-box:0.27.0
  • K-Link » K-Box » Version: 0.27.1
    cpe:2.3:a:k-link:k-box:0.27.1
  • K-Link » K-Box » Version: 0.27.2
    cpe:2.3:a:k-link:k-box:0.27.2
  • K-Link » K-Box » Version: 0.28.0
    cpe:2.3:a:k-link:k-box:0.28.0
  • K-Link » K-Box » Version: 0.28.1
    cpe:2.3:a:k-link:k-box:0.28.1
  • K-Link » K-Box » Version: 0.28.2
    cpe:2.3:a:k-link:k-box:0.28.2
  • K-Link » K-Box » Version: 0.28.3
    cpe:2.3:a:k-link:k-box:0.28.3
  • K-Link » K-Box » Version: 0.28.4
    cpe:2.3:a:k-link:k-box:0.28.4
  • K-Link » K-Box » Version: 0.29.0
    cpe:2.3:a:k-link:k-box:0.29.0
  • K-Link » K-Box » Version: 0.29.1
    cpe:2.3:a:k-link:k-box:0.29.1
  • K-Link » K-Box » Version: 0.30.0
    cpe:2.3:a:k-link:k-box:0.30.0
  • K-Link » K-Box » Version: 0.31.0
    cpe:2.3:a:k-link:k-box:0.31.0
  • K-Link » K-Box » Version: 0.31.1
    cpe:2.3:a:k-link:k-box:0.31.1
  • K-Link » K-Box » Version: 0.31.2
    cpe:2.3:a:k-link:k-box:0.31.2
  • K-Link » K-Box » Version: 0.31.3
    cpe:2.3:a:k-link:k-box:0.31.3
  • K-Link » K-Box » Version: 0.31.4
    cpe:2.3:a:k-link:k-box:0.31.4
  • K-Link » K-Box » Version: 0.31.5
    cpe:2.3:a:k-link:k-box:0.31.5
  • K-Link » K-Box » Version: 0.31.6
    cpe:2.3:a:k-link:k-box:0.31.6
  • K-Link » K-Box » Version: 0.32.0
    cpe:2.3:a:k-link:k-box:0.32.0
  • K-Link » K-Box » Version: 0.32.1
    cpe:2.3:a:k-link:k-box:0.32.1
  • K-Link » K-Box » Version: 0.32.2
    cpe:2.3:a:k-link:k-box:0.32.2
  • K-Link » K-Box » Version: 0.32.3
    cpe:2.3:a:k-link:k-box:0.32.3
  • K-Link » K-Box » Version: 0.33.0
    cpe:2.3:a:k-link:k-box:0.33.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved