CVE-2022-40778: XSS
Published Sep 19, 2022
·Updated
A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response.
Affected Software
1 affected component
OPSWAT MetaDefender<4.13.0
Event History
Sep 19, 2022
CVE Published
via MITRE·06:08 AM
Data Sourced
via MITRE·06:08 AM
Description
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-40778.
2
What is the severity of CVE-2022-40778?
The severity of CVE-2022-40778 is medium (5.4).
3
What is the affected software?
The affected software is OPSWAT MetaDefender ICAP Server before 4.13.0.
4
How does CVE-2022-40778 work?
CVE-2022-40778 is a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary JavaScript or HTML due to the blocked page response.
5
How can I fix CVE-2022-40778?
To fix CVE-2022-40778, you should upgrade OPSWAT MetaDefender ICAP Server to version 4.13.0 or newer.