What is GHSA-phvw-r25p-8xv7?

GHSA-phvw-r25p-8xv7 is a security advisory published by GitHub Security Advisories with Critical severity. Cross-site Scripting in com.erudika:para-core

Which CVE IDs does GHSA-phvw-r25p-8xv7 cover?

GHSA-phvw-r25p-8xv7 covers the following CVE IDs: CVE-2022-1782. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-phvw-r25p-8xv7?

GHSA-phvw-r25p-8xv7 has a CVSS v3 base score of 9.4, published by GitHub Security Advisories.

Which products are affected by GHSA-phvw-r25p-8xv7?

GHSA-phvw-r25p-8xv7 affects 1 product, including: maven/com.erudika:para-core:\u003c 1.45.11.

GHSA-phvw-r25p-8xv7CriticalCVSS 9.4

Cross-site Scripting in com.erudika:para-core

Vendor

GitHub Security Advisories

Published

May 19, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-1782 →

📋 Description

Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.

🎯 Affected products1

maven/com.erudika:para-core:< 1.45.11

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-1782
https://github.com/erudika/para/commit/9d844f31333475a0394dd14b901ea50674b281f8
https://huntr.dev/bounties/7555693f-94e4-4183-98cb-3497da6df028
https://github.com/advisories/GHSA-phvw-r25p-8xv7