CVE-2022-23049 (GCVE-0-2022-23049)
Vulnerability from cvelistv5 – Published: 2022-02-09 22:03 – Updated: 2024-08-03 03:28
VLAI
Summary
Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in. When an administrator user visits the "User Sessions" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session.
Severity
No CVSS data available.
CWE
- Stored cross-site scripting (XSS)
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/exponentcms/exponent-cms/issues/1546 | x_refsource_MISC |
| https://fluidattacks.com/advisories/cobain/ | x_refsource_MISC |
| https://exponentcms.lighthouseapp.com/projects/61… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Exponent CMS |
Affected:
v2.6.0patch2
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T03:28:43.249Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/exponentcms/exponent-cms/issues/1546"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://fluidattacks.com/advisories/cobain/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Exponent CMS",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "v2.6.0patch2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the \"User-Agent\" header when logging in. When an administrator user visits the \"User Sessions\" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Stored cross-site scripting (XSS)",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-02-09T22:03:59.000Z",
"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869",
"shortName": "Fluid Attacks"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/exponentcms/exponent-cms/issues/1546"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://fluidattacks.com/advisories/cobain/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "help@fluidattacks.com",
"ID": "CVE-2022-23049",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Exponent CMS",
"version": {
"version_data": [
{
"version_value": "v2.6.0patch2"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the \"User-Agent\" header when logging in. When an administrator user visits the \"User Sessions\" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Stored cross-site scripting (XSS)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/exponentcms/exponent-cms/issues/1546",
"refsource": "MISC",
"url": "https://github.com/exponentcms/exponent-cms/issues/1546"
},
{
"name": "https://fluidattacks.com/advisories/cobain/",
"refsource": "MISC",
"url": "https://fluidattacks.com/advisories/cobain/"
},
{
"name": "https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461",
"refsource": "MISC",
"url": "https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869",
"assignerShortName": "Fluid Attacks",
"cveId": "CVE-2022-23049",
"datePublished": "2022-02-09T22:03:59.000Z",
"dateReserved": "2022-01-10T00:00:00.000Z",
"dateUpdated": "2024-08-03T03:28:43.249Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-23049",
"date": "2026-05-30",
"epss": "0.00502",
"percentile": "0.66364"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exponentcms:exponent_cms:2.6.0:patch2:*:*:*:*:*:*\", \"matchCriteriaId\": \"5A643ED1-5F73-4CDE-A28A-D321EFCAC2F5\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the \\\"User-Agent\\\" header when logging in. When an administrator user visits the \\\"User Sessions\\\" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session.\"}, {\"lang\": \"es\", \"value\": \"Exponent CMS versi\\u00f3n 2.6.0patch2 permite a un usuario autenticado inyectar c\\u00f3digo JavaScript persistente en el encabezado \\\"User-Agent\\\" cuando es iniciada la sesi\\u00f3n. Cuando un usuario administrador visita la pesta\\u00f1a \\\"User Sessions\\\", el JavaScript ser\\u00e1 desencadenado permitiendo a un atacante comprometer la sesi\\u00f3n del administrador\"}]",
"id": "CVE-2022-23049",
"lastModified": "2024-11-21T06:47:53.090",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.3, \"impactScore\": 2.7}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:S/C:N/I:P/A:N\", \"baseScore\": 3.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 6.8, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2022-02-09T23:15:19.607",
"references": "[{\"url\": \"https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461\", \"source\": \"help@fluidattacks.com\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Vendor Advisory\"]}, {\"url\": \"https://fluidattacks.com/advisories/cobain/\", \"source\": \"help@fluidattacks.com\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/exponentcms/exponent-cms/issues/1546\", \"source\": \"help@fluidattacks.com\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Vendor Advisory\"]}, {\"url\": \"https://fluidattacks.com/advisories/cobain/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/exponentcms/exponent-cms/issues/1546\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}]",
"sourceIdentifier": "help@fluidattacks.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-79\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-23049\",\"sourceIdentifier\":\"help@fluidattacks.com\",\"published\":\"2022-02-09T23:15:19.607\",\"lastModified\":\"2024-11-21T06:47:53.090\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the \\\"User-Agent\\\" header when logging in. When an administrator user visits the \\\"User Sessions\\\" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session.\"},{\"lang\":\"es\",\"value\":\"Exponent CMS versi\u00f3n 2.6.0patch2 permite a un usuario autenticado inyectar c\u00f3digo JavaScript persistente en el encabezado \\\"User-Agent\\\" cuando es iniciada la sesi\u00f3n. Cuando un usuario administrador visita la pesta\u00f1a \\\"User Sessions\\\", el JavaScript ser\u00e1 desencadenado permitiendo a un atacante comprometer la sesi\u00f3n del administrador\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:S/C:N/I:P/A:N\",\"baseScore\":3.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":6.8,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exponentcms:exponent_cms:2.6.0:patch2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A643ED1-5F73-4CDE-A28A-D321EFCAC2F5\"}]}]}],\"references\":[{\"url\":\"https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461\",\"source\":\"help@fluidattacks.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://fluidattacks.com/advisories/cobain/\",\"source\":\"help@fluidattacks.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/exponentcms/exponent-cms/issues/1546\",\"source\":\"help@fluidattacks.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://fluidattacks.com/advisories/cobain/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/exponentcms/exponent-cms/issues/1546\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]}]}}"
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…