What is CVE-2022-29540?

CVE-2022-29540 is a medium-severity vulnerability in Resi Gemini-Net, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2022-06-02.

How severe is CVE-2022-29540?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Resi Gemini-Net

CVE-2022-29540

resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject arbitrary web script or HTML into an HTTP GET parameter that reflects user input without sanitization. This exists on numerous application endpoints,

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (52.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Resi Gemini-net — versions 4.2
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Product, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-29540?: CVE-2022-29540 is a medium-severity vulnerability in Resi Gemini-Net, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2022-06-02.
How severe is CVE-2022-29540?: Medium severity. CVSS v3 base score is 6.1 out of 10.