Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-4728

Published: 27/12/2022 Updated: 07/11/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 2f178f490e10efc03cd1d27c72f64ecab224eb23. It is recommended to apply a patch to fix this issue. VDB-216742 is the identifier assigned to this vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

graphite project graphite -

Vendor Advisories

Debian CVElist Bug Report Logs: graphite-web: CVE-2022-4728 CVE-2022-4729 CVE-2022-4730
Debian Bug report logs - #1026992 graphite-web: CVE-2022-4728 CVE-2022-4729 CVE-2022-4730 Package: src:graphite-web; Maintainer for src:graphite-web is Debian Graphite Group <team+debian-graphite-team@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 25 Dec 2022 20:27:01 UTC Severi ...
Red Hat:
DescriptionThe MITRE CVE dictionary describes this issue as: A vulnerability has been found in Graphite Web and classified as problematic This vulnerability affects unknown code of the component Cookie Handler The manipulation leads to cross site scripting The attack can be initiated remotely The exploit has been disclosed to the public and may ...

References

CWE-79https://github.com/graphite-project/graphite-web/commit/2f178f490e10efc03cd1d27c72f64ecab224eb23https://github.com/graphite-project/graphite-web/issues/2744https://github.com/graphite-project/graphite-web/pull/2785https://vuldb.com/?id.216742https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026992https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2022-4728
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310CVE-2024-21683CVE-2024-22187chromedeserializationXPath injectionCVE-2024-27842denial of serviceCVE-2024-24851googleCVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook