-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability stems from unsanitized output in dashboard breadcrumbs. Release notes explicitly mention 'Sanitized dashboard breadcrumbs to prevent stored XSS' as the fix for CVE-2022-43556. The breadcrumb generation functions in dashboard controllers would be the logical location for this vulnerability, as they handle user-controlled data display. While exact code isn't shown, the pattern matches common XSS vulnerabilities where output encoding was missing in UI components handling user-supplied data.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| concrete5/concrete5 | composer | < 8.5.10 | 8.5.10 |
| concrete5/concrete5 | composer | >= 9.0.0, < 9.1.3 | 9.1.3 |
Ongoing coverage of React2Shell