CVE-2022-28919: XSS
HTMLCreator releasestable2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function generateFilename.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/dokuwikito a version that resolves this vulnerability.Fixed in 0.0.20220731.a-2Fixed in 2024-02-06b+dfsg-9Fixed in 2026-07-14.c+dfsg-3 - Upgrade
Upgrade
debian/dokuwikito a version that resolves this vulnerability.Fixed in 0.0.20220731.a-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-28919?
CVE-2022-28919 is classified as a cross-site scripting (XSS) vulnerability, which can lead to the execution of malicious scripts in a user's browser.
How do I fix CVE-2022-28919?
To fix CVE-2022-28919, update to the latest version of Dokuwiki that addresses this vulnerability.
What software is affected by CVE-2022-28919?
CVE-2022-28919 affects Dokuwiki version 2020-07-29 and Fedora versions 34, 35, and 36.
Is CVE-2022-28919 easy to exploit?
CVE-2022-28919 can be easily exploited by attackers to inject malicious scripts if proper input validation is not implemented.
What can happen if I am affected by CVE-2022-28919?
If affected by CVE-2022-28919, an attacker could potentially gain unauthorized access to user sessions and data, compromising user security.