CVE-2022-4396

Summary

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e. It is recommended to apply a patch to fix this issue. The identifier VDB-215249 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected Software

Weaknesses

• CWE-707: CWE-707 Improper Neutralization -> CWE-74 Injection -> CWE-79 Cross Site Scripting

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/RDFLib/pyrdfa3/pull/40
• https://github.com/RDFLib/pyrdfa3/commit/ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e
• https://vuldb.com/?id.215249

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/RDFLib/pyrdfa3/pull/40
• https://github.com/RDFLib/pyrdfa3/commit/ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e
• https://vuldb.com/?id.215249

• ←Previous
• Next→