Packagist/privatebin/privatebin CVE-2022-24833: high 8.2, EPSS 1.36%

Persistent Cross-site Scripting vulnerability in PrivateBin

Action: Upgrade privatebin/privatebin to 1.4.0 or later.

composer require privatebin/privatebin:1.4.0

Affected

Fixed versions

Sources

• osv: GHSA-cqcc-mm6x-vmvw
• https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-cqcc-mm6x-vmvw
• https://nvd.nist.gov/vuln/detail/CVE-2022-24833
• https://github.com/PrivateBin/PrivateBin/commit/2a4d572c1e9eb9b608d32b0cc0cb3b6c3b684eab
• https://github.com/PrivateBin/PrivateBin

CVE-2022-24833 · published 2022-04-12T20:45:22Z · modified 2023-11-08T04:08:38.122625Z · JSON