CVE-2022-4637

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is ef49e709c8adecc3a83cdc6164a67162991d2213. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216495.

• CWE-79

• https://github.com/tkrebs/ep3-bs/commit/ef49e709c8adecc3a83cdc6164a67162991d2213Patch, Third Party Advisory
• https://github.com/tkrebs/ep3-bs/issues/564Issue Tracking, Patch, Third Party Advisory
• https://github.com/tkrebs/ep3-bs/releases/tag/1.8.0Patch, Third Party Advisory
• https://vuldb.com/?id.216495Third Party Advisory
• https://github.com/tkrebs/ep3-bs/commit/ef49e709c8adecc3a83cdc6164a67162991d2213Patch, Third Party Advisory
• https://github.com/tkrebs/ep3-bs/issues/564Issue Tracking, Patch, Third Party Advisory
• https://github.com/tkrebs/ep3-bs/releases/tag/1.8.0Patch, Third Party Advisory
• https://vuldb.com/?id.216495Third Party Advisory

Published

Dec 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-46364A SSRF vulnerability in parsing the href attribute of XOP:In…9.8
• CVE-2022-46365Apache StreamPark 1.0.0 before 2.0.0 When the user successfu…9.1
• CVE-2022-46366Apache Tapestry 3.x allows deserialization of untrusted data…9.8
• CVE-2022-46367Rumpus - FTP server Cross-site request forgery (CSRF) – Priv…8.8
• CVE-2022-46368Rumpus - FTP server version 9.0.7.1 Cross-site request forge…8.8
• CVE-2022-46369Rumpus - FTP server version 9.0.7.1 Persistent cross-site sc…5.4
• CVE-2022-46370Rumpus - FTP server version 9.0.7.1 Improper Token Verificat…7.5
• CVE-2022-46371Alotcer - AR7088H-A firmware version 16.10.3 Information dis…5.3
• CVE-2022-46372Alotcer - AR7088H-A firmware version 16.10.3 Command executi…8.8
• CVE-2022-46377An out-of-bounds read vulnerability exists in the PORT comma…7.5
• CVE-2022-46378An out-of-bounds read vulnerability exists in the PORT comma…7.5
• CVE-2022-4638A vulnerability classified as problematic was found in colle…6.1