CVE-2022-4882

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-4882

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4882.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-4882

Published

2023-01-09T09:15:10.140Z

Modified

2026-04-10T04:53:34.618226Z

Severity

4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability was found in kaltura mwEmbed up to 2.91. It has been rated as problematic. Affected by this issue is some unknown functionality of the file modules/KalturaSupport/components/share/share.js of the component Share Plugin. The manipulation of the argument res leads to cross site scripting. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.92.rc1 is able to address this issue. The name of the patch is 4f11b6f6610acd6d89de5f8be47cf7c610643845. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217664.

References

Affected packages

Git / github.com/kaltura/mwembed

Affected ranges

Type

GIT

Repo

https://github.com/kaltura/mwembed

Events

Introduced

Last affected

079931ca089e3e64795f39019022c69ec74e3a76

Fixed

4f11b6f6610acd6d89de5f8be47cf7c610643845

Fixed

b854b16226128036448816ca9cc6ee8de45622a4

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.91"
        }
    ]
}

Affected versions

2.*

2.70-accessibiity

v1.*

v1.7.0

v1.7.0.rc10

v1.7.0.rc7

v1.7.0.rc9

v1.7.0rc2

v1.7.1.0

v1.8.2.2

v2.*

v2.0.3.2

v2.58.rc4_polls_rc2

v2.69.4

v2.90

v2.90.rc1

v2.90.rc2

v2.90.rc3

v2.90.rc4

v2.90.rc5

v2.91

v2.91.rc1

v2.91.rc2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4882.json"