FeedlyFeedly
CVEsCVEs
Threat IntelligenceThreat Intelligence
Threat IntelligenceThreat Intelligence
Log in
ChangelogChangelog
ChangelogChangelog
Log in
Log in
Start Free Trial
Start Free Trial
FeedlyFeedly
CVEsCVEs
Threat IntelligenceThreat Intelligence
Threat IntelligenceThreat Intelligence
Log in
ChangelogChangelog
ChangelogChangelog
Log in
Log in
Start Free Trial
Start Free Trial

CVE-2022-4082

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

Published: Nov 20, 2022 / Updated: 24mo ago

010
Medium Severity
(Estimated)
No EPSS yet
CVE info copied to clipboard

A vulnerability, which was classified as problematic, has been found in Solwin Infotech User Activity Log Plugin. This issue affects some unknown processing of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214049 was assigned to this vulnerability.

Timeline

First Article

Feedly found the first article mentioning CVE-2022-4082. See article

Nov 20, 2022 at 1:39 PM / vuldb.com
Static CVE Timeline Graph

Links to Mitre Att&cks

T1562.003: Impair Command History Logging
+null more

Attack Patterns

CAPEC-10: Buffer Overflow via Environment Variables
+null more

News

CVE-2022-4082
INCIBE-CERT - Vulnerabilities RSS / 24mo
Gravedad: None Publicado: 20/11/2022 Last revised: 20/11/2022 Descripción: *** Pendiente de traducción *** ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.
NA - CVE-2022-4082 - ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER....
Security-Database Alerts Monitor : Last 100 Alerts / 24mo
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE-2022-4082
Newest CVEs from Tenable / 24mo
Severity Not Scored Description A vulnerability, which was classified as problematic, has been found in Solwin Infotech User Activity Log Plugin. This issue affects some unknown processing of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214049 was assigned to this vulnerability. Read more at https://www.tenable.com/cve/CVE-2022-4082
CVE-2022-4082
r/netcve / 24mo
submitted by /u/CVEreport [link] [comments]
CVE-2022-4082
CyberFishNews / 24mo
A vulnerability, which was classified as problematic, has been found in Solwin Infotech User Activity Log Plugin. This issue affects some unknown processing of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output...
See 4 more articles and social media posts

CVSS V3.1

Unknown

Categories

CWE-74(1406)CWE-116(280)CWE-117(81)

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI

Feedly Threat Intelligence30-day free trial