Paper/Archive/CVE-2022-2925

CVE-2022-2925

appwrite appwrite/appwrite — Cross-site Scripting (XSS) - Stored in appwrite/appwrite

EPSS 0.8%CVSS 9.0

critical.is priorityof 100

39

CVSS 9.0 (CNA)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 57.5.575 × 2011.5 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Cross-site Scripting (XSS) - Stored in GitHub repository appwrite/appwrite prior to 1.0.0-RC1.

Affected

ProductAffectedFixed inSource

appwrite/appwriteunspecified – < 1.0.0-RC11.0.0-RC1CNA

Scores by source

@huntrdev (CNA)9.0CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References

refhuntr.dev/bounties/a3b4148f-165f-4583-abed-5568696d99dc refgithub.com/appwrite/appwrite/commit/b5b4d92623c13fa8e5c71736db461e81fb7a7ade