CVE Vulnerability

CVE-2022-46151

Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field of the auth callback url in `querybook/server/app/auth/oauth_auth.py` and `querybook/server/app/auth/okta_auth.py`. This may allow attackers to perform reflected cross site scripting (XSS) if Content Security Policy (CSP) is not enabled or `unsafe-inline` is allowed. Users are advised to upgrade to the latest, patched version of querybook (version 3.14.2 or greater). Users unable to upgrade may enable CSP and not allow unsafe-inline or manually escape query parameters in a reverse proxy.

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/pinterest/querybook/security/advisories/GHSA-mrrw-9wf7-xq6w Mitigation Third Party Advisory
https://github.com/pinterest/querybook/commit/88a7f10495bf5ed1a556ade51a2f2794e403c063 Patch Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:pinterest:querybook:*:*:*:*:*:*:*:*
Information

Published : 2022-12-06 01:15

Updated : 2022-12-07 03:23

NVD link : CVE-2022-46151

Mitre link : CVE-2022-46151

Products Affected
No products.
CWE
CWE-79