CVE-2022-4966

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-4966

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4966.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-4966

Published

2024-04-01T12:00:06.142Z

Modified

2026-07-15T01:49:19.611320539Z

Severity

3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

sequentech admin-console Election Description cross site scripting

Details

A vulnerability was found in sequentech admin-console up to 6.1.7 and classified as problematic. Affected by this issue is some unknown functionality of the component Election Description Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 7.0.0-beta.1 is able to address this issue. The patch is identified as 0043a6b1e6e0f5abc9557e73f9ffc524fc5d609d. It is recommended to upgrade the affected component. VDB-258782 is the identifier assigned to this vulnerability.

Database specific

{
    "cwe_ids": [
        "CWE-79"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4966.json"
}

References

Affected packages

Git / github.com/sequentech/admin-console

Affected ranges

Type

GIT

Repo

https://github.com/sequentech/admin-console

Events

Introduced

6fcd6451a1a7b5436a6c6f2b27d25ff76e592c9d

Fixed

0043a6b1e6e0f5abc9557e73f9ffc524fc5d609d

Fixed

31cde83d3cc245eeb2acd95f403adf3713c0f8ab

Database specific

{
    "extracted_events": [
        {
            "introduced": "6.1.0"
        },
        {
            "last_affected": "6.1.0"
        },
        {
            "introduced": "6.1.1"
        },
        {
            "last_affected": "6.1.1"
        },
        {
            "introduced": "6.1.2"
        },
        {
            "last_affected": "6.1.2"
        },
        {
            "introduced": "6.1.3"
        },
        {
            "last_affected": "6.1.3"
        },
        {
            "introduced": "6.1.4"
        },
        {
            "last_affected": "6.1.4"
        },
        {
            "introduced": "6.1.5"
        },
        {
            "last_affected": "6.1.5"
        },
        {
            "introduced": "6.1.6"
        },
        {
            "last_affected": "6.1.6"
        },
        {
            "introduced": "6.1.7"
        },
        {
            "last_affected": "6.1.7"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

6.*

6.1.0

6.1.1

6.1.2

6.1.3

6.1.4

6.1.5

6.1.6

6.1.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4966.json"