CVE-2022-3895 : Some UI elements of the Common User Interface Component are not properly sanitiz

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).

Published 2022-11-15 15:15:12

Updated 2022-11-16 19:43:39

Source Hallo Welt! GmbH

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2022-3895

Hallowelt » Bluespice
Versions from including (>=) 4.1.0 and before (<) 4.2.1
cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*:*
Matching versions
Hallowelt » Common User Interface
Versions from including (>=) 3.0.0 and before (<) 3.0.5
cpe:2.3:a:hallowelt:common_user_interface:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 39 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None
4.0	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	2.5	1.4	Hallo Welt! GmbH
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

Jump to