CVE-2022-25276

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-252777.2Drupal core sanitizes filenames with dangerous extensions upon upload (reference: SA-CORE-2020-012) and strips leading and trailing dots froCVE-2022-252786.5Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alterCVE-2022-25286.5In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing pCVE-2022-25297.5sflow decode package does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attackers can craft malforCVE-2022-252906.5WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private kCVE-2022-252918.8An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflowCVE-2022-252928.8A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially executCVE-2022-252938.8A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially executCVE-2022-252947.8Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local WiCVE-2022-252955.4This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The aCVE-2022-252967.3The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifyinCVE-2022-252978.8This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method
CVE-2022-25276: Medium severity, CVSS 6.1 | Vulnix