CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username.

• CWE-79

• https://github.com/grahamgilbert/Crypt-Server/pull/109Patch, Third Party Advisory
• https://github.com/grahamgilbert/Crypt-Server/releases/tag/3.3.0Release Notes, Third Party Advisory
• https://github.com/grahamgilbert/Crypt-Server/pull/109Patch, Third Party Advisory
• https://github.com/grahamgilbert/Crypt-Server/releases/tag/3.3.0Release Notes, Third Party Advisory

Published

Apr 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29583service_windows.go in the kardianos service package for Go o…7.8
• CVE-2022-29584Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows …5.4
• CVE-2022-29585In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a s…7.5
• CVE-2022-29586Konica Minolta bizhub MFP devices before 2022-04-14 allow a …7.4
• CVE-2022-29587Konica Minolta bizhub MFP devices before 2022-04-14 have an …4
• CVE-2022-29588Konica Minolta bizhub MFP devices before 2022-04-14 use clea…7.5
• CVE-2022-2959A race condition was found in the Linux kernel's watch queue…7
• CVE-2022-29591Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList b…9.8
• CVE-2022-29592Tenda TX9 Pro 22.03.02.10 devices allow OS command injection…9.8
• CVE-2022-29593relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with fir…5.9
• CVE-2022-29594eG Agent before 7.2 has weak file permissions that enable es…7.8
• CVE-2022-29596MicroStrategy Enterprise Manager 2022 allows authentication …9.8