Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: Hallo Welt! BlueSpice 4.2.1 Clear all filters
TI-2022-20340 CVE-2022-42001 · GHSA-mh3f-7jrf-xp34

Potential XSS in book navigation

Priority LOW 24

Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the book navigation.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00274 Published 2022-11-15 Fixed in 4.2.1 CWE-79
TI-2022-20339 CVE-2022-42000 · GHSA-jwrw-2fh5-fg85

Potential XSS in comment section

Priority LOW 24

Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00274 Published 2022-11-15 Fixed in 4.2.1 CWE-79
TI-2022-20182 CVE-2022-41814 · GHSA-pr8j-283m-jpf6

Potential XSS in history view

Priority LOW 24

Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the history view of a wikipage.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00274 Published 2022-11-15 Fixed in 4.2.1 CWE-79
TI-2022-20164 CVE-2022-41789 · GHSA-fq8v-gxm4-m5gv

Potential XSS on default page header

Priority LOW 24

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the default page header of a wikipage.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00274 Published 2022-11-15 Fixed in 4.2.1 CWE-79
TI-2022-20014 CVE-2022-41611 · GHSA-m2wg-p64c-9g45

Potential XSS on sidebar navigation

Priority LOW 22

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00281 Published 2022-11-15 Fixed in 4.2.1 CWE-79
TI-2022-03627 CVE-2022-3958 · GHSA-hw93-9r88-26rp

Potential XSS on personal menu navigation

Priority LOW 24

Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and ot…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00274 Published 2022-11-15 Fixed in 4.2.1 CWE-79
TI-2022-03570 CVE-2022-3893 · GHSA-pggj-5r99-rf46

Potential XSS on custom menu navigation

Priority LOW 22

Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00281 Published 2022-11-15 Fixed in 4.2.1 CWE-79