CVE-2022-24548

MediumCVSS 5.5/10Last modified Jun 17, 2026

Related CVEs from 2022

CVE-2022-245497.8Windows AppX Package Manager Elevation of Privilege VulnerabilityCVE-2022-24556.5A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting CVE-2022-245507.8Windows Telephony Server Elevation of Privilege VulnerabilityCVE-2022-245518.8A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attackerCVE-2022-245529.8A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input parameters. Some of CVE-2022-245539.8An issue was found in Zfaka <= 1.4.5. The verification of the background file upload function check is not strict, resulting in remote commaCVE-2022-24562.7An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versioCVE-2022-245629.8In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access tCVE-2022-245635.4In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_CVE-2022-245646.1Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subjectCVE-2022-245655.4Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. ThCVE-2022-245665.4In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escape
CVE-2022-24548: Medium severity, CVSS 5.5 | Vulnix