CVE-2022-43996

Description

csaf-poc/csaf_distribution Cross-site Scripting vulnerability in github.com/csaf-poc/csaf_distribution

How to fix CVE-2022-43996

To remediate CVE-2022-43996, upgrade the affected package to a fixed version below.

• Go/github.com/csaf-poc/csaf_distribution—upgrade to 0.8.2 or later
• —upgrade to 0.8.2 or later

Is CVE-2022-43996 being exploited?

Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 0.8.2
• from 0, < 0.8.2

CVSS scores

References (6)

• ADVISORYgithub.com/advisories/GHSA-xxfx-w2rw-gh63
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-43996
• PATCHgithub.com/csaf-poc/csaf_distribution
• WEBgithub.com/csaf-poc/csaf_distribution/commit/17f22855ee8d4270dd17ff748c30ed7304846fdc