CVE-2022-4527

A vulnerability was found in collective.task up to 3.0.8. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.py. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 3.0.9 is able to address this issue. The name of the patch is 1aac7f83fa2c2b41d59ba02748912953461f3fac. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-215907.

• CWE-79
• CWE-79

• https://github.com/collective/collective.task/commit/1aac7f83fa2c2b41d59ba02748912953461f3facPatch, Third Party Advisory
• https://github.com/collective/collective.task/releases/tag/3.0.9Third Party Advisory
• https://vuldb.com/?id.215907Third Party Advisory
• https://github.com/collective/collective.task/commit/1aac7f83fa2c2b41d59ba02748912953461f3facPatch, Third Party Advisory
• https://github.com/collective/collective.task/releases/tag/3.0.9Third Party Advisory
• https://vuldb.com/?id.215907Third Party Advisory

Published

Dec 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45228Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contai…3.5
• CVE-2022-4523A vulnerability, which was classified as problematic, has be…6.1
• CVE-2022-4524A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2022-4525A vulnerability has been found in National Sleep Research Re…6.1
• CVE-2022-4526A vulnerability was found in django-photologue up to 3.15.1 …6.1
• CVE-2022-45269A directory traversal vulnerability in the component SCS.Web…7.5
• CVE-2022-45275An arbitrary file upload vulnerability in /queuing/admin/aja…7.2
• CVE-2022-45276An issue in the /index/user/user_edit.html component of YJCM…9.8
• CVE-2022-45278Jizhicms v2.3.3 was discovered to contain a SQL injection vu…8.8
• CVE-2022-4528Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-45280A cross-site scripting (XSS) vulnerability in the Url parame…5.4
• CVE-2022-45283GPAC MP4box v2.0.0 was discovered to contain a stack overflo…7.8