CVE-2022-0705: Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Published Mar 16, 2022
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
Affected Software
1 affected component
Pimcore pimcore<=10.3.0
Remediation
Event History
Mar 16, 2022
CVE Published
via MITRE·10:30 AM
Data Sourced
via MITRE·10:30 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-0705?
CVE-2022-0705 has been classified with a medium severity due to its potential for leading to stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2022-0705?
To fix CVE-2022-0705, upgrade your Pimcore installation to version 10.4.0 or later.
3
What versions of Pimcore are affected by CVE-2022-0705?
CVE-2022-0705 affects all Pimcore versions prior to 10.4.0.
4
Can CVE-2022-0705 lead to data compromise?
Yes, CVE-2022-0705 can lead to data compromise through stored XSS, allowing attackers to execute scripts in the context of users.
5
Is CVE-2022-0705 a client-side or server-side vulnerability?
CVE-2022-0705 is primarily a client-side vulnerability as it involves executing malicious scripts in users' browsers.