CVE-2022-30770

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnerability that could be exploited by an attacker to mislead an administrator and steal their credentials.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: May 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-307718.2Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm c CVE-2022-307728.2Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory. Function 0x52 of CVE-2022-307736.4DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but befor CVE-2022-307746.4DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before CVE-2022-307755.5xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF documen CVE-2022-307766.1atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.CVE-2022-307776.1Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.CVE-2022-30785.5An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after alloca CVE-2022-307807.5Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connec CVE-2022-307817.5Gitea before 1.16.7 does not escape git fetch remote.CVE-2022-307827.5Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers.CVE-2022-307836.7An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G th