CVE-2022-23458

Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.

• CWE-79

• https://github.com/nhn/tui.grid/commit/e9db5968675ae113c07efc091cce210f2b26854fPatch, Third Party Advisory
• https://securitylab.github.com/advisories/GHSL-2022-029_nhn_tui_grid/Exploit, Third Party Advisory
• https://github.com/nhn/tui.grid/commit/e9db5968675ae113c07efc091cce210f2b26854fPatch, Third Party Advisory
• https://securitylab.github.com/advisories/GHSL-2022-029_nhn_tui_grid/Exploit, Third Party Advisory

Published

Sep 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23452An authorization flaw was found in openstack-barbican, where…4.9
• CVE-2022-23453Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23454Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23455Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23456Potential arbitrary file deletion vulnerability has been ide…5.5
• CVE-2022-23457ESAPI (The OWASP Enterprise Security API) is a free, open so…9.8
• CVE-2022-23459Jsonxx or Json++ is a JSON parser, writer and reader written…9.8
• CVE-2022-2346In affected versions of Octopus Deploy it is possible for a …4.3
• CVE-2022-23460Jsonxx or Json++ is a JSON parser, writer and reader written…7.5
• CVE-2022-23461Jodit Editor is a WYSIWYG editor written in pure TypeScript …6.1
• CVE-2022-23462IOWOW is a C utility library and persistent key/value storag…7.5
• CVE-2022-23463Nepxion Discovery is a solution for Spring Cloud. Discover i…9.8