CVE-2022-4456

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in falling-fruit and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 15adb8e1ea1f1c3e3d152fc266071f621ef0c621. It is recommended to apply a patch to fix this issue. VDB-215446 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-445605.3The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data toCVE-2022-445617.5The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized appCVE-2022-445629.8The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may CVE-2022-445635.9There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-445647.8Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected CVE-2022-445655.3An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <CVE-2022-445667.5A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 6CVE-2022-445679.8A command injection vulnerability exists in Rocket.Chat-Desktop <3.8.14 that could allow an attacker to pass a malicious url of openInternalCVE-2022-445697.8A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.CVE-2022-44575.5Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attaCVE-2022-445707.5A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can cause the Range headCVE-2022-445717.5There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1.