CVE-2022-46165

Go/github.com/syncthing/syncthing CVE-2022-46165: medium 4.6

syncthing vulnerable to Cross-site Scripting (XSS) in Web GUI

Action: Upgrade github.com/syncthing/syncthing to 1.23.5 or later.

go get github.com/syncthing/syncthing@v1.23.5

Affected

Fixed versions

Sources

• osv: GHSA-9rp6-23gf-4c3h
• https://github.com/syncthing/syncthing/security/advisories/GHSA-9rp6-23gf-4c3h
• https://nvd.nist.gov/vuln/detail/CVE-2022-46165
• https://github.com/syncthing/syncthing/commit/73c52eafb6566435dffd979c3c49562b6d5a4238
• https://github.com/syncthing/syncthing/commit/f5e5af391a6583047c64ef8c51642003a79b75cf
• https://github.com/syncthing/syncthing
• https://github.com/syncthing/syncthing/releases/tag/v1.23.5
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IRYGBFJPVBW6PPTETNIBWQJE4HJSA5PJ
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XEBWSQVGHSTR4ZO7LVVEMPEGMV2DS5XR

CVE-2022-46165 · published 2023-06-06T16:39:57Z · modified 2024-07-24T20:12:00.093170Z · JSON