CVE-2022-3803

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in eolinker apinto-dashboard and classified as problematic. This issue affects some unknown processing of the file /api/discoveries/. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212639.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-380304.3Windows USB Serial Driver Information Disclosure VulnerabilityCVE-2022-380318.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2022-380326.6Windows Portable Device Enumerator Service Security Feature Bypass VulnerabilityCVE-2022-380336.5Windows Server Remotely Accessible Registry Keys Information Disclosure VulnerabilityCVE-2022-380348.8Windows Workstation Service Elevation of Privilege VulnerabilityCVE-2022-380367.5Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityCVE-2022-380377.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-380387.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-380397.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-38046.1A vulnerability was found in eolinker apinto-dashboard. It has been classified as problematic. Affected is an unknown function of the file /CVE-2022-380408.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-380417.5Windows Secure Channel Denial of Service Vulnerability
CVE-2022-3803: Medium severity, CVSS 6.1 | Vulnix