Openlibrary - Stored XSS

Description

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS.

Scores

EPSS (exploitation in 30 days)

0.87% · top 41% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.5.

Weakness

• CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (opens in a new tab)All about CWE-79 and its CVEs

Affected products

• infogami · infogami

  • affected 0.2 – < unspecified
  • affected unspecified – ≤ 0.4

What to do

Solution: Update version to OL_201908 or later

References (2)

• https://www.mend.io/vulnerability-database/CVE-2022-32159 (opens in a new tab)x_refsource_MISCx_transferred
• https://github.com/internetarchive/infogami/pull/195/commits/ccc2141c5fb093870c9e2742c01336ecca8cd12e (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-32159](https://trackcve.app/badge/CVE-2022-32159.svg)](https://trackcve.app/cve/CVE-2022-32159)

Record last updated 17 Sept 2024, 03:48 UTC.