CVE-2022-1458
published 2022-04-25CVE-2022-1458: Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.
PriorityP423medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.68%
47.7th percentile
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| open-emr | openemr | < 6.1.0.1 | 6.1.0.1 |
| openemr | openemr_openemr | >= unspecified < 6.1.0.1 | 6.1.0.1 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvdv3.07.3HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
cisa7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j658-8xwc-wj9h: Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6
ghsa_unreviewed·2022-04-26
CVE-2022-1458 [MEDIUM] CWE-79 GHSA-j658-8xwc-wj9h: Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.
CISA
Microsoft Win32k Privilege Escalation Vulnerability
cisa·2022-01-10·CVSS 7.8
CVE-2019-1458 [HIGH] Microsoft Win32k Privilege Escalation Vulnerability
Vulnerability: Microsoft Win32k Privilege Escalation Vulnerability
Affected: Microsoft Win32k
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1458
Remediation Due Date: 2022-07-10
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-04-25
Published