CVE-2022-4067CWE-79

Cross-site Scripting (XSS) - Stored in librenms/librenms

Low · published November 20, 2022

Patch now

High probability of exploitation

CVSS calls it low at 3.4. It sits in the 99.8th percentile for exploit probability.

CVSS v3.0

3.4

EPSS

94%

Percentile

99.8

In the wild

Unconfirmed

What it is

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

The record

Technical detail

CVSS v3.0: 3.4 · LOW
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.93712 · 99.8th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2022-11-20T00:00Z

EPSS history

Timeline

20 NOV 00:00Z
Cross-site Scripting (XSS) - Stored in librenms/librenms
cvelistv5