GHSA-mw37-wx8p-gp45
- Source
- https://github.com/advisories/GHSA-mw37-wx8p-gp45
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/09/GHSA-mw37-wx8p-gp45/GHSA-mw37-wx8p-gp45.json
- Aliases
- Published
- 2022-09-17T00:00:30Z
- Modified
- 2024-02-21T05:28:42.912868Z
- Details
-
Craft CMS
3.70-RC1–3.7.55.1and4.0.0-RC1–4.2.0.1are vulnerable to Cross Site Scripting (XSS) via entry revisions and drafts. Versions3.7.55.2and4.2.1contain patches for this issue. - References
-
- https://nvd.nist.gov/vuln/detail/CVE-2022-37251
- https://github.com/craftcms/cms/commit/7139213dbd9e177a3528aac8e2db8de91830f118
- https://github.com/craftcms/cms/commit/919c9074ff8596bf30a629b0888c529793e9a903
- https://github.com/craftcms/cms/commit/f0d9b8a1e3ac005a2418f7d3d9059b49a96e73ea
- https://github.com/craftcms/cms
- https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#421---2022-08-09
- https://labs.integrity.pt/advisories/cve-2022-37251
- http://craft.com
Affected packages
Packagist / craftcms/cms
Package
- Name
- craftcms/cms
Affected versions
3.*
3.7.0-beta.1
3.7.0-beta.2
3.7.0-beta.3
3.7.0-beta.4
3.7.0-beta.5
3.7.0-beta.6
3.7.0
3.7.1
3.7.2
3.7.3
3.7.3.1
3.7.3.2
3.7.4
3.7.5
3.7.6
3.7.7
3.7.8
3.7.9
3.7.10
3.7.11
3.7.12
3.7.13
3.7.14
3.7.15
3.7.16
3.7.17
3.7.17.1
3.7.17.2
3.7.18
3.7.18.1
3.7.18.2
3.7.19
3.7.19.1
3.7.20
3.7.21
3.7.22
3.7.23
3.7.24
3.7.25
3.7.25.1
3.7.26
3.7.27
3.7.27.1
3.7.27.2
3.7.28
3.7.29
3.7.30
3.7.30.1
3.7.31
3.7.32
3.7.33
3.7.34
3.7.35
3.7.36
3.7.37
3.7.38
3.7.39
3.7.40
3.7.40.1
3.7.41
3.7.42
3.7.43
3.7.44
3.7.45
3.7.45.1
3.7.45.2
3.7.46
3.7.47
3.7.47.1
3.7.48
3.7.49
3.7.50
3.7.51
3.7.52
3.7.53
3.7.53.1
3.7.54
3.7.55
3.7.55.1
Packagist / craftcms/cms
Package
- Name
- craftcms/cms