Phoronix-Media Phoronix Test Suite vulnerabilities

6 known vulnerabilities affecting phoronix-media/phoronix_test_suite.

Total CVEs

6

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2MEDIUM4

Vulnerabilities

Page 1 of 1

CVE-2022-40704MEDIUMCVSS 6.1fixed in 2022-07-232023-01-17

CVE-2022-40704 [MEDIUM] CWE-79 CVE-2022-40704: A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite. A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.

CVE-2022-0571MEDIUMCVSS 6.1fixed in 10.8.22022-02-14

CVE-2022-0571 [MEDIUM] CWE-79 CVE-2022-0571: Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.

CVE-2022-0238MEDIUMCVSS 4.3≤ 10.8.02022-01-16

CVE-2022-0238 [MEDIUM] CWE-352 CVE-2022-0238: phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF) phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

CVE-2022-0197HIGHCVSS 8.8fixed in 10.8.02022-01-13

CVE-2022-0197 [HIGH] CWE-352 CVE-2022-0197: phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF) phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

CVE-2022-0196HIGHCVSS 8.8fixed in 10.8.02022-01-13

CVE-2022-0196 [HIGH] CWE-352 CVE-2022-0196: phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF) phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

CVE-2022-0157MEDIUMCVSS 5.4fixed in 10.8.02022-01-10

CVE-2022-0157 [MEDIUM] CWE-79 CVE-2022-0157: phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('C phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')