CVE-2022-3783: A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file…

PriorityP428medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.60%

44.2th percentile

A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/ui-component/ui-component-ctrl.js of the component ui_text Format Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 9305d1a82f19b235dfad24a7d1dd4ed244db7743. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-212555.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
nodered	node-red-dashboard	< 3.2.0	3.2.0
nodered	node-red-dashboard	>= 0 < 3.2.0	3.2.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.