CVE-2022-4957

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-4957

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4957.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-4957

Published

2023-12-03T19:00:04.692Z

Modified

2026-07-15T01:49:17.397733073Z

Severity

3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

librespeed speedtest stats.php cross site scripting

Details

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. Upgrading to version 5.2.5 is able to address this issue. The patch is named a85f2c086f3449dffa8fe2edb5e2ef3ee72dc0e9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-246643.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.2.0"
                },
                {
                    "last_affected": "5.2.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-79"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4957.json"
}

References

Affected packages

Git / github.com/librespeed/speedtest

Affected ranges

Type

GIT

Repo

https://github.com/librespeed/speedtest

Events

Introduced

Fixed

a85f2c086f3449dffa8fe2edb5e2ef3ee72dc0e9

Fixed

5bddaac12ad54cdab1a0c131b18ef53492ded25d

Database specific

{
    "cpe": "cpe:2.3:a:librespeed:speedtest:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.4"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

4.*

4.2

4.2.1

4.2.2

4.2.3

4.2.4

4.2.5

4.2.6

4.2.7

4.2.8

4.2.9

4.3

4.3.1

4.3.2

4.3.2-hf1

4.4

4.5

4.5.1

4.5.2

4.5.3

4.5.4

4.5.5

4.6

4.6.1

4.6.2

4.6u1

4.7

4.7.1

4.7.2

5.*

5.0

5.1

5.2

5.2.1

5.2.2

5.2.3

5.2.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4957.json"