CVE-2022-23081

Openlibrary - Reflected XSS

State: Published
Severity: Not scored
Published: Jun 22, 2022
Updated: Sep 17, 2024
Reserved: Jan 10, 2022

Read the record on cve.org

Description

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
openlibraryopenlibrary	deploy-2019-10-16/sponsorship to before unspecifiedAffected deploy-2021-12-22 and earlierAffected

References

https://www.mend.io/vulnerability-database/CVE-2022-23081
https://github.com/internetarchive/openlibrary/pull/6597/commits/5460c8e8b517ef83c6a3b33654ba43ef0cbf051e

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.