CVE-2022-4396 LOW

CVE-2022-4396: RDFlib pyrdfa3 init.py _get_option cross site scripting

Vendor Rdflib

Product pyrdfa3

Weakness CWE-707

Published December 10, 2022

Last update April 15, 2025

View on NVD All CVEs

CVSS base score

3.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option of the file pyRdfa/__init__.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e. It is recommended to apply a patch to fix this issue. The identifier VDB-215249 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Key dates

02Disclosure timeline

December 10, 2022 CVE published

April 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-4396 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/707.html

Related vulnerabilities

CVE-2022-4396: RDFlib pyrdfa3 __init__.py _get_option cross site scripting

01Description

02Disclosure timeline

03References

04Related CVE

CVE-2022-4396: RDFlib pyrdfa3 init.py _get_option cross site scripting