CVE-2022-4588

Source
https://cve.org/CVERecord?id=CVE-2022-4588
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4588.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-4588
Published
2022-12-17T00:00:00Z
Modified
2026-10-28T02:30:23Z
Severity
  • 2.4 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
Boston Sleep slice Layout cross site scripting
Details

A vulnerability, which was classified as problematic, was found in Boston Sleep slice up to 84.1.x. Affected is an unknown function of the component Layout Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 84.2.0 is able to address this issue. The name of the patch is 6523bb17d889e2ab13d767f38afefdb37083f1d0. It is recommended to upgrade the affected component. VDB-216174 is the identifier assigned to this vulnerability.

Database specific
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4588.json"
}
References

Affected packages

Git / github.com/sleepepi/slice

Affected ranges

Type
GIT
Repo
https://github.com/sleepepi/slice
Events
Database specific
Show details
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "84.0"
                },
                {
                    "last_affected": "84.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "84.1"
                },
                {
                    "last_affected": "84.1"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "fixed": "6523bb17d889e2ab13d767f38afefdb37083f1d0"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "v84.2.0",
            "range": [
                {
                    "fixed": "7f1eec7213835561579da57cccfbc4289d7c1fda"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

84.*
84.0
84.1
v84.*
v84.0.0
v84.1.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4588.json"