CVE-2022-4527

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-4527

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4527.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-4527

Aliases

Published

2022-12-15T00:00:00Z

Modified

2026-07-15T01:49:11.430498855Z

Severity

3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

collective.task table.py AssignedGroupColumn cross site scripting

Details

A vulnerability was found in collective.task up to 3.0.8. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.py. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 3.0.9 is able to address this issue. The name of the patch is 1aac7f83fa2c2b41d59ba02748912953461f3fac. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-215907.

Database specific

{
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4527.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "last_affected": "3.0.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/collective/collective.task

Affected ranges

Type

GIT

Repo

https://github.com/collective/collective.task

Events

Introduced

Fixed

19ca0ecc7efb9db2c8f37c566f339a6493d97ed9

Fixed

1aac7f83fa2c2b41d59ba02748912953461f3fac

Database specific

{
    "cpe": "cpe:2.3:a:collective.task_project:collective.task:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.0.9"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.0

2.*

2.0

2.1

2.2.1

2.3

2.4

2.5

3.*

3.0

3.0.1

3.0.2

3.0.3

3.0.4

3.0.5

3.0.6

3.0.7

3.0.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4527.json"