CVE-2022-3895CWE-79

Potential XSS in common user interface component library

Medium · published November 15, 2022

CVSS v3.1
4.0
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-11-15T14:24Z
EPSS history
Timeline
  • 15 NOV 14:24Z
    Potential XSS in common user interface component library
    cvelistv5