CVE-2022-4591

A vulnerability was found in mschaef toto up to 1.4.20. It has been declared as problematic. This vulnerability affects unknown code of the component Email Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is able to address this issue. The name of the patch is 1f27f37c1a06f54a76971f70eaa6139dc139bdf9. It is recommended to upgrade the affected component. VDB-216178 is the identifier assigned to this vulnerability.

• CWE-707
• CWE-79

• https://github.com/mschaef/toto/commit/1f27f37c1a06f54a76971f70eaa6139dc139bdf9Patch, Third Party Advisory
• https://github.com/mschaef/toto/releases/tag/1.4.21Release Notes, Third Party Advisory
• https://vuldb.com/?id.216178Third Party Advisory
• https://github.com/mschaef/toto/commit/1f27f37c1a06f54a76971f70eaa6139dc139bdf9Patch, Third Party Advisory
• https://github.com/mschaef/toto/releases/tag/1.4.21Release Notes, Third Party Advisory
• https://vuldb.com/?id.216178Third Party Advisory

Published

Dec 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45897On Xerox WorkCentre 3550 25.003.03.000 devices, an authentic…6.5
• CVE-2022-45899Nokia Broadcast Message Center (BMC) before 13.1 allows an u…6.5
• CVE-2022-4590A vulnerability was found in mschaef toto up to 1.4.20. It h…6.1
• CVE-2022-45907In PyTorch before trunk/89695, torch.jit.annotations.parse_t…9.8
• CVE-2022-45908In PaddlePaddle before 2.4, paddle.audio.functional.get_wind…9.8
• CVE-2022-45909drachtio-server before 0.8.19 has a heap-based buffer over-r…9.1
• CVE-2022-45910Improper neutralization of special elements used in an LDAP …5.3
• CVE-2022-45911An issue was discovered in Zimbra Collaboration (ZCS) 9.0. X…6.1
• CVE-2022-45912An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15…7.2
• CVE-2022-45913An issue was discovered in Zimbra Collaboration (ZCS) 9.0. X…6.1
• CVE-2022-45914The ESL (Electronic Shelf Label) protocol, as implemented by…6.5
• CVE-2022-45915ILIAS before 7.16 allows OS Command Injection.8.8