CVE-2022-4957

MITTEL 6.1CVE-2022-4957 · Published 03/12/2023 · updated 17/06/2026

Kurz gesagt

CVE-2022-4957 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in speedtest (librespeed).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.56%, höher als bei 46.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
speedtest librespeed	`≤ 5.2.4`	No fix yet

Description

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. Upgrading to version 5.2.5 is able to address this issue. The patch is named a85f2c086f3449dffa8fe2edb5e2ef3ee72dc0e9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-246643.

References

librespeed/speedtest commit a85f2c0 · Patch
librespeed/speedtest release 5.2.5 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free