CVE-2022-23378: XSS
Published Feb 9, 2022
·Updated
A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/allergens/edit/1 is vulnerable.
Affected Software
1 affected component
TastyIgniter TastyIgniter=3.2.2
Event History
Feb 9, 2022
CVE Published
via MITRE·12:16 PM
Data Sourced
via MITRE·12:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-23378?
CVE-2022-23378 is rated as a medium severity Cross-Site Scripting vulnerability.
2
How do I fix CVE-2022-23378?
To fix CVE-2022-23378, update TastyIgniter to a version that addresses this vulnerability.
3
Which version of TastyIgniter is affected by CVE-2022-23378?
CVE-2022-23378 affects TastyIgniter version 3.2.2.
4
What is the exploit vector for CVE-2022-23378?
The exploit vector for CVE-2022-23378 involves the "items[0][path]" parameter in a request to /admin/allergens/edit/1.
5
Are older versions of TastyIgniter affected by CVE-2022-23378?
Yes, older versions prior to 3.2.2 may also be affected, but the specific vulnerability is noted for version 3.2.2.