CVE-2022-45472: XSS
Published Nov 23, 2022
·Updated
CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup.
Affected Software
1 affected component
Caehealthcare Learningspace Enterprise=image_267r-patch_639
Event History
Nov 23, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-45472?
CVE-2022-45472 is considered a medium severity vulnerability due to the potential for DOM-based cross-site scripting (XSS) attacks.
2
How do I fix CVE-2022-45472?
To fix CVE-2022-45472, upgrade to the latest version of CAE LearningSpace Enterprise that addresses the DOM XSS issue.
3
What platforms are affected by CVE-2022-45472?
CVE-2022-45472 affects CAE LearningSpace Enterprise, specifically the image 267r patch 639 version.
4
What vulnerabilities does CVE-2022-45472 exploit?
CVE-2022-45472 exploits DOM-based XSS vulnerabilities through the ontouchmove and onpointerup event handlers.
5
Is CVE-2022-45472 publicly known?
Yes, CVE-2022-45472 is a publicly disclosed vulnerability that can be found in CVE databases.