CVE-2022-3493
published 2022-10-13CVE-2022-3493: A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown…
PriorityP426medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.40%
33.6th percentile
A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the component Add Employee Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-210773 was assigned to this vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oretnom23 | human_resource_management_system | — | — |
| sourcecodester | human_resource_management_system | — | — |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
cisa7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SourceCodester Human Resource Management System 1.0 Add Employee First Name/Middle Name/Last Name cross site scripting (EUVD-2022-42865)
vuldb·2026-07-16·CVSS 5.4
CVE-2022-3493 [MEDIUM] SourceCodester Human Resource Management System 1.0 Add Employee First Name/Middle Name/Last Name cross site scripting (EUVD-2022-42865)
A vulnerability, which was classified as problematic, was found in SourceCodester Human Resource Management System 1.0. Affected by this issue is some unknown functionality of the component Add Employee Handler. Executing a manipulation of the argument First Name/Middle Name/Last Name can lead to cross site scripting.
This vulnerability is tracked as CVE-2022-3493. The attack can be launched remotely. Moreover, an exploit is present.
GHSA
GHSA-76cw-59x8-rvfm: A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1
ghsa_unreviewed·2022-10-13
CVE-2022-3493 [MEDIUM] CWE-707 GHSA-76cw-59x8-rvfm: A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1
A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the component Add Employee Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-210773 was assigned to this vulnerability.
CISA
Linux Kernel Privilege Escalation Vulnerability
cisa·2022-10-20·CVSS 7.8
CVE-2021-3493 [HIGH] CWE-862 Linux Kernel Privilege Escalation Vulnerability
Vulnerability: Linux Kernel Privilege Escalation Vulnerability
Affected: Linux Kernel
The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.
Required Action: Apply updates per vendor instructions.
Notes: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52; https://nvd.nist.gov/vuln/detail/CVE-2021-3493
Remediation Due Date: 2022-11-10
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-13
Published