CVE-2022-27894CWE-79

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.

Medium · published November 4, 2022

CVSS v3.1
4.8
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-11-04T17:15Z
EPSS history
Timeline
  • 04 NOV 17:15Z
    The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.
    cvelistv5