CVE-2022-4642

MITTEL 5.4CVE-2022-4642 · Published 21/12/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-4642 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in tatoeba2 (tatoeba).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.55%, höher als bei 46.4% aller Schwachstellen.
Abhilfe: auf 2022-10-30 oder neuer aktualisieren.

Package	Affected versions	Patched versions
tatoeba2 tatoeba	`< 2022-10-30`	`2022-10-30`

Description

A vulnerability was found in tatoeba2. It has been classified as problematic. This affects an unknown part of the component Profile Name Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version prod_2022-10-30 is able to address this issue. The name of the patch is 91110777fc8ddf1b4a2cf4e66e67db69b9700361. It is recommended to upgrade the affected component. The identifier VDB-216501 was assigned to this vulnerability.

References

Tatoeba/tatoeba2 commit 9111077 · Patch
Tatoeba/tatoeba2 · Issue Tracking
Tatoeba/tatoeba2 release prod_2022-10-30 · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free