Csaf Provider Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Csaf Provider Project records in CISA KEV

No Csaf Provider Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Csaf Provider · all components

TI-2022-21623 CVE-2022-43996 · GHSA-xxfx-w2rw-gh63

LOW 25

The csaf_provider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00484 Published 2022-12-13 Fixed in 0.8.2 CWE-79