CVE-2022-24833
1 advisory.
Packagist/privatebin/privatebin CVE-2022-24833: high 8.2, EPSS 1.36%
Persistent Cross-site Scripting vulnerability in PrivateBin
Action: Upgrade privatebin/privatebin to 1.4.0 or later.
composer require privatebin/privatebin:1.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.21 | 1.4.0 | - |
Fixed versions
| 1.4.0 |
Sources
- osv: GHSA-cqcc-mm6x-vmvw
- https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-cqcc-mm6x-vmvw
- https://nvd.nist.gov/vuln/detail/CVE-2022-24833
- https://github.com/PrivateBin/PrivateBin/commit/2a4d572c1e9eb9b608d32b0cc0cb3b6c3b684eab
- https://github.com/PrivateBin/PrivateBin
CVE-2022-24833 · published · modified · JSON