What is GHSA-894q-wpg5-mf2h?

GHSA-894q-wpg5-mf2h is a security advisory published by GitHub Security Advisories with Medium severity. pyRdfa3 Cross-site Scripting vulnerability

Which CVE IDs does GHSA-894q-wpg5-mf2h cover?

GHSA-894q-wpg5-mf2h covers the following CVE IDs: CVE-2022-4396. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-894q-wpg5-mf2h?

GHSA-894q-wpg5-mf2h has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-894q-wpg5-mf2h?

GHSA-894q-wpg5-mf2h affects 1 product, including: pip/pyRdfa3:\u003c= 3.5.3.

GHSA-894q-wpg5-mf2hMediumCVSS 5.4

pyRdfa3 Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

December 10, 2022

Last Modified

April 8, 2024

🔗 CVE IDs covered (1)

CVE-2022-4396 →

📋 Description

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option of the file pyRdfa/__init__.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e. It is recommended to apply a patch to fix this issue. The identifier VDB-215249 was assigned to this vulnerability.

🎯 Affected products1

pip/pyRdfa3:<= 3.5.3

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2022-4396
https://github.com/RDFLib/pyrdfa3/pull/40
https://github.com/RDFLib/pyrdfa3/commit/ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e
https://vuldb.com/?id.215249
https://github.com/RDFLib/pyrdfa3/issues/38
https://github.com/advisories/GHSA-894q-wpg5-mf2h