vulnerability

FreeBSD: VID-1a15b928-5011-4953-8133-d49e24902fe1 (CVE-2022-41905): py-WsgiDAV -- XSS vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:N)

Published

Aug 31, 2023

Added

Sep 1, 2023

Modified

Jun 15, 2026

Description

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set `dir_browser.enable = False` in the configuration.

Solutions

freebsd-upgrade-package-py37-wsgidavfreebsd-upgrade-package-py38-wsgidavfreebsd-upgrade-package-py39-wsgidavfreebsd-upgrade-package-py310-wsgidavfreebsd-upgrade-package-py311-wsgidav

References

CVE-2022-41905
https://attackerkb.com/topics/CVE-2022-41905
CWE-79
EUVD-EUVD-2022-0366
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0366

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report