CVE-2022-4396

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option of the file pyRdfa/__init__.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e. It is recommended to apply a patch to fix this issue. The identifier VDB-215249 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-707
• CWE-79

• https://github.com/RDFLib/pyrdfa3/commit/ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3ePatch, Third Party Advisory
• https://github.com/RDFLib/pyrdfa3/pull/40Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?id.215249Third Party Advisory
• https://github.com/RDFLib/pyrdfa3/commit/ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3ePatch, Third Party Advisory
• https://github.com/RDFLib/pyrdfa3/pull/40Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?id.215249Third Party Advisory

Published

Dec 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43952An improper neutralization of input during web page generati…5.4
• CVE-2022-43953A use of externally-controlled format string in Fortinet For…7.8
• CVE-2022-43954An insertion of sensitive information into log file vulnerab…6.5
• CVE-2022-43955An improper neutralization of input during web page generati…6.1
• CVE-2022-43958A vulnerability has been identified in QMS Automotive (All v…7.6
• CVE-2022-43959Insufficiently Protected Credentials in the AD/LDAP server s…4.9
• CVE-2022-43967Concrete CMS (formerly concrete5) below 8.5.10 and between 9…6.1
• CVE-2022-43968Concrete CMS (formerly concrete5) below 8.5.10 and between 9…6.1
• CVE-2022-43969Ricoh mp_c4504ex devices with firmware 1.06 mishandle creden…9.1
• CVE-2022-4397A vulnerability was found in morontt zend-blog-number-2. It …6.5
• CVE-2022-43970A buffer overflow vulnerability exists in Linksys WRT54GL Wi…7.2
• CVE-2022-43971An arbitrary code exection vulnerability exists in Linksys W…7.2