CVE-2022-4456

A vulnerability has been found in falling-fruit and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 15adb8e1ea1f1c3e3d152fc266071f621ef0c621. It is recommended to apply a patch to fix this issue. VDB-215446 is the identifier assigned to this vulnerability.

• CWE-707
• CWE-79

• https://github.com/falling-fruit/falling-fruit/commit/15adb8e1ea1f1c3e3d152fc266071f621ef0c621Patch, Third Party Advisory
• https://vuldb.com/?id.215446Third Party Advisory
• https://github.com/falling-fruit/falling-fruit/commit/15adb8e1ea1f1c3e3d152fc266071f621ef0c621Patch, Third Party Advisory
• https://vuldb.com/?id.215446Third Party Advisory

Published

Dec 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-44554The power module has a vulnerability in permission verificat…7.5
• CVE-2022-44555The DDMP/ODMF module has a service hijacking vulnerability. …7.5
• CVE-2022-44556Missing parameter type validation in the DRM module. Success…7.5
• CVE-2022-44557The SmartTrimProcessEvent module has a vulnerability of obta…7.5
• CVE-2022-44558The AMS module has a vulnerability of serialization/deserial…9.8
• CVE-2022-44559The AMS module has a vulnerability of serialization/deserial…9.8
• CVE-2022-44560The launcher module has an Intent redirection vulnerability.…5.3
• CVE-2022-44561The preset launcher module has a permission verification vul…7.5
• CVE-2022-44562The system framework layer has a vulnerability of serializat…9.8
• CVE-2022-44563There is a race condition vulnerability in SD upgrade mode. …5.9
• CVE-2022-44564Huawei Aslan Children's Watch has a path traversal vulnerabi…7.8
• CVE-2022-44565An improper access validation vulnerability exists in airMAX…5.3