Vulnerability · Published Dec 13, 2022 · Assigned by mitre
CVE-2022-43996
Medium 5.4
In plain English
A medium-severity cross-site scripting in the github.com/csaf-poc/csaf_distribution package (Go). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
The csaf_provider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html. The endpoint upload allows valid CSAF advisories (JSON format) to be uploaded with Content-Type text/html and filenames ending in .html. When subsequently accessed via web browser, these advisories are served and interpreted as HTML pages. Such uploaded advisories can contain JavaScript code that will execute within the browser context of users inspecting the advisory.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/csaf-poc/csaf_distribution | 0.8.2 | GHSA-xxfx-w2rw-gh63 |
| Go | github.com/csaf-poc/csaf_distribution | 0.8.2 | GO-2022-1164 |
Affected products (as reported)
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N