Search criteria

2 vulnerabilities found for Common User Interface Component by Hallo Welt! GmbH

CVE-2022-3895 (GCVE-0-2022-3895)

Vulnerability from nvd – Published: 2022-11-15 14:24 – Updated: 2025-04-29 18:12
VLAI?
Title
Potential XSS in common user interface component library
Summary
Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).
Severity ?
4 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE
  • CWE-79 - Cross-site Scripting (XSS)
Assigner
HW
References
Impacted products
Vendor Product Version
Hallo Welt! GmbH Common User Interface Component Affected: 3 , < 3.0.5 (custom)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:20:58.454Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-08"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-3895",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-29T18:11:00.732213Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-29T18:12:08.089Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Common User Interface Component",
          "vendor": "Hallo Welt! GmbH",
          "versions": [
            {
              "lessThan": "3.0.5",
              "status": "affected",
              "version": "3",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2022-11-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Cross-site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-15T00:00:00.000Z",
        "orgId": "ff95705b-1a40-4639-8017-a58fa868baee",
        "shortName": "HW"
      },
      "references": [
        {
          "url": "https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-08"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to Common User Interface 3.0.5 or later. This is included in BlueSpice 4.2.1 or later."
        }
      ],
      "source": {
        "advisory": "BSSA-2022-08",
        "discovery": "INTERNAL"
      },
      "title": "Potential XSS in common user interface component library",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ff95705b-1a40-4639-8017-a58fa868baee",
    "assignerShortName": "HW",
    "cveId": "CVE-2022-3895",
    "datePublished": "2022-11-15T14:24:49.235Z",
    "dateReserved": "2022-11-08T00:00:00.000Z",
    "dateUpdated": "2025-04-29T18:12:08.089Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-3895 (GCVE-0-2022-3895)

Vulnerability from cvelistv5 – Published: 2022-11-15 14:24 – Updated: 2025-04-29 18:12
VLAI?
Title
Potential XSS in common user interface component library
Summary
Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).
Severity ?
4 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE
  • CWE-79 - Cross-site Scripting (XSS)
Assigner
HW
References
Impacted products
Vendor Product Version
Hallo Welt! GmbH Common User Interface Component Affected: 3 , < 3.0.5 (custom)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:20:58.454Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-08"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-3895",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-29T18:11:00.732213Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-29T18:12:08.089Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Common User Interface Component",
          "vendor": "Hallo Welt! GmbH",
          "versions": [
            {
              "lessThan": "3.0.5",
              "status": "affected",
              "version": "3",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2022-11-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Cross-site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-15T00:00:00.000Z",
        "orgId": "ff95705b-1a40-4639-8017-a58fa868baee",
        "shortName": "HW"
      },
      "references": [
        {
          "url": "https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-08"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to Common User Interface 3.0.5 or later. This is included in BlueSpice 4.2.1 or later."
        }
      ],
      "source": {
        "advisory": "BSSA-2022-08",
        "discovery": "INTERNAL"
      },
      "title": "Potential XSS in common user interface component library",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ff95705b-1a40-4639-8017-a58fa868baee",
    "assignerShortName": "HW",
    "cveId": "CVE-2022-3895",
    "datePublished": "2022-11-15T14:24:49.235Z",
    "dateReserved": "2022-11-08T00:00:00.000Z",
    "dateUpdated": "2025-04-29T18:12:08.089Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}