CVE-2022-43014: XSS

Published Oct 19, 2022

Updated

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parameter.

Affected Software

1 affected component

OpenCATS OpenCATS=0.9.6

Event History

Oct 19, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-43014?

The severity of CVE-2022-43014 is medium with a CVSS score of 6.1.

How does CVE-2022-43014 affect OpenCATS v0.9.6?

CVE-2022-43014 affects OpenCATS v0.9.6 through a reflected cross-site scripting (XSS) vulnerability in the joborderID parameter.

What is the CWE category of CVE-2022-43014?

CVE-2022-43014 is categorized as CWE-79 (Improper Neutralization of Input During Web Page Generation) vulnerability.

Is there a patch or fix available for CVE-2022-43014?

Currently, there is no official patch or fix available for CVE-2022-43014. It is recommended to follow the vendor's security advisories or consider implementing security measures to mitigate the risk.

How can I mitigate the risk of CVE-2022-43014?

To mitigate the risk of CVE-2022-43014, consider implementing input validation and sanitization on the joborderID parameter, and regularly update to the latest version of OpenCATS.