OrchardCore - HTML Injection
CVE-2022-32173

5.4MEDIUM

Key Information:

Vendor: Orchardcore
Status: Orchardcore
Vendor: CVE Published:; 3 October 2022

🔔 Create Orchardcore Vulnerability Alert

What is CVE-2022-32173?

In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

OrchardCore v0.0.1

OrchardCore <= unspecified

References

https://www.mend.io/vulnerability-database/CVE-2022-32173

x_refsource_MISC

https://github.com/OrchardCMS/OrchardCore/commit/0163c88d...

x_refsource_MISC

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Oct 3, 2022
Vulnerability Reserved
May 31, 2022

Credit

Mend Vulnerability Research Team (MVR)

JSON

Orchardcore