XSS in Nuxsmin Syspass
CVE-2022-4930
A vulnerability classified as problematic was found in nuxsmin sysPass up to 3.2.4. Affected by this vulnerability is an unknown functionality of the component URL Handler. The manipulation leads to cross site scripting. The attack can be…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.005 (41.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Nuxsmin Syspass — versions 3.2.0, 3.2.1, 3.2.2
- Syspass
Weakness classification (CWE)
References
- cna@vuldb.com (Permissions Required, technical-description, vdb-entry)
- cna@vuldb.com (signature, Permissions Required, permissions-required)
- cna@vuldb.com (issue-tracking, Patch)
- cna@vuldb.com (Patch, patch)
- cna@vuldb.com (Release Notes, patch)
Frequently asked questions
- What is CVE-2022-4930?
- CVE-2022-4930 is a low-severity vulnerability in Nuxsmin Syspass, classified under Cross-site Scripting. CVSS score: 3.5/10. Published 2023-03-06.
- How severe is CVE-2022-4930?
- Low severity. CVSS v3 base score is 3.5 out of 10.