Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.4
CVSSv3

CVE-2022-4730

Published: 27/12/2022 Updated: 07/11/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 2f178f490e10efc03cd1d27c72f64ecab224eb23. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216744.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

graphite project graphite -

Vendor Advisories

Debian CVElist Bug Report Logs: graphite-web: CVE-2022-4728 CVE-2022-4729 CVE-2022-4730
Debian Bug report logs - #1026992 graphite-web: CVE-2022-4728 CVE-2022-4729 CVE-2022-4730 Package: src:graphite-web; Maintainer for src:graphite-web is Debian Graphite Group <team+debian-graphite-team@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 25 Dec 2022 20:27:01 UTC Severi ...
Red Hat:
DescriptionThe MITRE CVE dictionary describes this issue as: A vulnerability was found in Graphite Web It has been classified as problematic Affected is an unknown function of the component Absolute Time Range Handler The manipulation leads to cross site scripting It is possible to launch the attack remotely The exploit has been disclosed to t ...

References

CWE-79https://github.com/graphite-project/graphite-web/commit/2f178f490e10efc03cd1d27c72f64ecab224eb23https://vuldb.com/?id.216744https://github.com/graphite-project/graphite-web/issues/2746https://github.com/graphite-project/graphite-web/pull/2785https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026992https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2022-4730
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-34001CVE-2024-37018LFICVE-2024-1275CVE-2024-1086CSRFCVE-2024-31030CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook