CVSS 3.1
5.4 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCVE-2022-4396
Medium (5.4) in pyrdfa3 project pyrdfa3. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in pyrdfa3 3.6.2.
A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option of the file pyRdfa/__init__.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e. It is recommended to apply a patch to fix this issue. The identifier VDB-215249 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-79, CWE-707
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pyrdfa3_project:pyrdfa3
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-894q-wpg5-mf2h | PyPI | pyrdfa3 | <3.6.2 | 3.6.2 |
| PYSEC-2026-910 | PyPI | pyrdfa3 | <3.6.2 | 3.6.2 |