CVE-2022-35630

MEDIUM 6.1CVE-2022-35630 · Published 29/07/2022 · updated 17/06/2026

In short

CVE-2022-35630 is a MEDIUM (CVSS 6.1) vulnerability affecting velociraptor (rapid7).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.1% of all vulnerabilities.
Fix: update to 0.6.5-2 or later.

Package	Affected versions	Patched versions
velociraptor rapid7	`< 0.6.5-2`	`0.6.5-2`

Description

A cross-site scripting (XSS) issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2.

References

rapid7.com/blog/post/2022/07/26/cve-2022-35629-35632-velociraptor-multiple-vulnerabilities-fixed · Patch

More vulnerabilities in velociraptor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

velociraptor

rapid7

< 0.6.5-2

0.6.5-2

More vulnerabilities in velociraptor

See all →