Vulnerabilities > CVE-2022-23598

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

getlaminas

fedoraproject

NVD

Published: 2022-01-28

Updated: 2024-11-21

Summary

laminas-form is a package for validating and displaying simple and complex forms. When rendering validation error messages via the `formElementErrors()` view helper shipped with laminas-form, many messages will contain the submitted value. However, in laminas-form prior to version 3.1.1, the value was not being escaped for HTML contexts, which could potentially lead to a reflected cross-site scripting attack. Versions 3.1.1 and above contain a patch to mitigate the vulnerability. A workaround is available. One may manually place code at the top of a view script where one calls the `formElementErrors()` view helper. More information about this workaround is available on the GitHub Security Advisory.

Vulnerable Configurations

Part	Description	Count
Application	Getlaminas Getlaminas Laminas Form 2.0.0 Getlaminas Laminas Form 2.0.1 Getlaminas Laminas Form 2.0.2 Getlaminas Laminas Form 2.0.3 Getlaminas Laminas Form 2.0.4 Getlaminas Laminas Form 2.0.5 Getlaminas Laminas Form 2.0.6 Getlaminas Laminas Form 2.0.7 Getlaminas Laminas Form 2.0.8 Getlaminas Laminas Form 2.1.0 Getlaminas Laminas Form 2.1.1 Getlaminas Laminas Form 2.1.2 Getlaminas Laminas Form 2.1.3 Getlaminas Laminas Form 2.1.4 Getlaminas Laminas Form 2.1.5 Getlaminas Laminas Form 2.1.6 Getlaminas Laminas Form 2.2.0 Getlaminas Laminas Form 2.2.1 Getlaminas Laminas Form 2.2.2 Getlaminas Laminas Form 2.2.3 Getlaminas Laminas Form 2.2.4 Getlaminas Laminas Form 2.2.5 Getlaminas Laminas Form 2.2.6 Getlaminas Laminas Form 2.2.7 Getlaminas Laminas Form 2.2.8 Getlaminas Laminas Form 2.2.9 Getlaminas Laminas Form 2.2.10 Getlaminas Laminas Form 2.3.0 Getlaminas Laminas Form 2.3.1 Getlaminas Laminas Form 2.3.2 Getlaminas Laminas Form 2.3.3 Getlaminas Laminas Form 2.3.4 Getlaminas Laminas Form 2.3.5 Getlaminas Laminas Form 2.3.6 Getlaminas Laminas Form 2.3.7 Getlaminas Laminas Form 2.3.8 Getlaminas Laminas Form 2.3.9 Getlaminas Laminas Form 2.4.0 Getlaminas Laminas Form 2.4.1 Getlaminas Laminas Form 2.4.2 Getlaminas Laminas Form 2.4.3 Getlaminas Laminas Form 2.4.4 Getlaminas Laminas Form 2.4.5 Getlaminas Laminas Form 2.4.6 Getlaminas Laminas Form 2.4.7 Getlaminas Laminas Form 2.4.8 Getlaminas Laminas Form 2.4.9 Getlaminas Laminas Form 2.4.10 Getlaminas Laminas Form 2.4.11 Getlaminas Laminas Form 2.4.12 Getlaminas Laminas Form 2.4.13 Getlaminas Laminas Form 2.5.0 Getlaminas Laminas Form 2.5.1 Getlaminas Laminas Form 2.5.2 Getlaminas Laminas Form 2.5.3 Getlaminas Laminas Form 2.6.0 Getlaminas Laminas Form 2.7.0 Getlaminas Laminas Form 2.7.1 Getlaminas Laminas Form 2.8.0 Getlaminas Laminas Form 2.8.1 Getlaminas Laminas Form 2.8.2 Getlaminas Laminas Form 2.8.3 Getlaminas Laminas Form 2.8.4 Getlaminas Laminas Form 2.9.0 Getlaminas Laminas Form 2.9.1 Getlaminas Laminas Form 2.9.2 Getlaminas Laminas Form 2.10.0 Getlaminas Laminas Form 2.10.1 Getlaminas Laminas Form 2.10.2 Getlaminas Laminas Form 2.11.0 Getlaminas Laminas Form 2.12.0 Getlaminas Laminas Form 2.12.1 Getlaminas Laminas Form 2.13.0 Getlaminas Laminas Form 2.14.0 Getlaminas Laminas Form 2.14.1 Getlaminas Laminas Form 2.14.2 Getlaminas Laminas Form 2.14.3 Getlaminas Laminas Form 2.14.4 Getlaminas Laminas Form 2.14.5 Getlaminas Laminas Form 2.14.6 Getlaminas Laminas Form 2.15.0 Getlaminas Laminas Form 2.15.1 Getlaminas Laminas Form 2.16.0 Getlaminas Laminas Form 2.16.1 Getlaminas Laminas Form 2.16.2 Getlaminas Laminas Form 2.16.3 Getlaminas Laminas Form 2.17.0 Getlaminas Laminas Form 3.1.0 Getlaminas Laminas Form 3.0.0 Getlaminas Laminas Form 3.0.1	100
OS	Fedoraproject Fedoraproject Fedora 34 Fedoraproject Fedora 35	2

Vulnerabilities > CVE-2022-23598 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-23598"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-23598