CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2022-4513
Medium (6.1) in eea eionet content registry. EPSS 0.6% chance of exploitation in the next 30 days.
A vulnerability, which was classified as problematic, has been found in European Environment Agency eionet.contreg. This issue affects some unknown processing. The manipulation of the argument searchTag/resourceUri leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2022-06-27T0948 is able to address this issue. The name of the patch is a120c2153e263e62c4db34a06ab96a9f1c6bccb6. It is recommended to upgrade the affected component. The identifier VDB-215885 was assigned to this vulnerability.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-79, CWE-707
- Published
- Modified
- Record from
- the NVD, synced
Affected
- eea:eionet_content_registry
References
- https://github.com/eea/eionet.contreg/commit/a120c2153e263e62c4db34a06ab96a9f1c6bccb6
- https://github.com/eea/eionet.contreg/releases/tag/2022-06-27T0948
- https://vuldb.com/?id.215885
- https://github.com/eea/eionet.contreg/commit/a120c2153e263e62c4db34a06ab96a9f1c6bccb6
- https://github.com/eea/eionet.contreg/releases/tag/2022-06-27T0948