Vulnerability Details CVE-2022-4513
A vulnerability, which was classified as problematic, has been found in European Environment Agency eionet.contreg. This issue affects some unknown processing. The manipulation of the argument searchTag/resourceUri leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2022-06-27T0948 is able to address this issue. The name of the patch is a120c2153e263e62c4db34a06ab96a9f1c6bccb6. It is recommended to upgrade the affected component. The identifier VDB-215885 was assigned to this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.0%
CVSS Severity
CVSS v3 Score 3.5
References
- https://github.com/eea/eionet.contreg/commit/a120c2153e263e62c4db34a06ab96a9f1c6bccb6
- https://github.com/eea/eionet.contreg/releases/tag/2022-06-27T0948
- https://vuldb.com/?id.215885
- https://github.com/eea/eionet.contreg/commit/a120c2153e263e62c4db34a06ab96a9f1c6bccb6
- https://github.com/eea/eionet.contreg/releases/tag/2022-06-27T0948
- https://vuldb.com/?id.215885
Products affected by CVE-2022-4513
-
cpe:2.3:a:eea:eionet_content_registry:-
-
cpe:2.3:a:eea:eionet_content_registry:2021-08-10t0913
-
cpe:2.3:a:eea:eionet_content_registry:2021-10-18t1514
-
cpe:2.3:a:eea:eionet_content_registry:2021-12-06t1417
-
cpe:2.3:a:eea:eionet_content_registry:2021-12-15t1157
-
cpe:2.3:a:eea:eionet_content_registry:2021-12-20t1143
-
cpe:2.3:a:eea:eionet_content_registry:2022-01-14t1523
-
cpe:2.3:a:eea:eionet_content_registry:2022-04-14t1147
-
cpe:2.3:a:eea:eionet_content_registry:2022-05-24t1407