CVE-2022-4495

Advisory

A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent. This issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py. The manipulation leads to cross site scripting. The attack may be initiated remotely.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-r48c-4vfj-h426
• https://nvd.nist.gov/vuln/detail/CVE-2022-4495
• https://github.com/collective/collective.dms.basecontent/commit/6c4d616fcc771822a14ebae5e23f3f6d96d1
• https://github.com/collective/collective.dms.basecontent
• https://github.com/collective/collective.dms.basecontent/releases/tag/1.7
• https://vuldb.com/?id.215813
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4495
• https://github.com/collective/collective.dms.basecontent/commit/6c4d616fcc771822a14ebae5e23f3f6d96d134bd