CVE-2022-34009

Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket

published July 27, 2022

CVSS
—
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00363 · 28.9th percentile
Published
2022-07-27T23:23Z
EPSS history
Timeline
  • 27 JUL 23:23Z
    Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket
    cvelistv5