CVE-2022-4527

Advisory

A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.py. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-4r9h-x77w-mffv
• https://nvd.nist.gov/vuln/detail/CVE-2022-4527
• https://github.com/collective/collective.task/commit/1aac7f83fa2c2b41d59ba02748912953461f3fac
• https://github.com/collective/collective.task
• https://github.com/collective/collective.task/releases/tag/3.0.9
• https://vuldb.com/?id.215907
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4527