CVE-2022-24181: XSS
Published Apr 1, 2022
·Updated
Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header.
Affected Software
1 affected component
Public Knowledge Project Open Journal Systems>=2.4.8<=3.3
Event History
Apr 1, 2022
CVE Published
via MITRE·11:42 AM
Data Sourced
via MITRE·11:42 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-24181?
CVE-2022-24181 has been classified as a high severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2022-24181?
To mitigate CVE-2022-24181, update your Open Journal Systems to version 3.3 or later.
3
What type of attack does CVE-2022-24181 involve?
CVE-2022-24181 involves cross-site scripting (XSS) via Host Header injection.
4
Who is affected by CVE-2022-24181?
CVE-2022-24181 affects users of PKP Open Journals System versions between 2.4.8 and 3.3.
5
Can CVE-2022-24181 allow remote code injection?
Yes, CVE-2022-24181 allows remote attackers to inject arbitrary code through the X-Forwarded-Host Header.