Maven/org.wso2.carbon.registry:carbon-registry CVE-2022-4520: medium 6.1, EPSS 0.70%

WSO2 carbon-registry Cross-site Scripting vulnerability

Action: Upgrade org.wso2.carbon.registry:carbon-registry to 4.8.12 or later.

Affected

Fixed versions

Sources

• osv: GHSA-j34r-57xj-pfm5
• https://nvd.nist.gov/vuln/detail/CVE-2022-4520
• https://github.com/wso2/carbon-registry/pull/404
• https://github.com/wso2/carbon-registry/commit/0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4
• https://github.com/wso2/carbon-registry
• https://github.com/wso2/carbon-registry/releases/tag/v4.8.12
• https://vuldb.com/?id.215900

CVE-2022-4520 · published 2022-12-15T21:30:26Z · modified 2023-11-08T04:10:50.759935Z · JSON