{"id":"CVE-2022-34009","aliases":["EUVD-2022-37042","GHSA-3632-grrp-f8wr","UBUNTU-CVE-2022-34009"],"status":"published","title":"Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS...","description":"Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00363,"percentile":0.30345,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-436","CWE-79"],"published":"2022-07-27T23:23:51Z","modified":"2026-10-17T12:56:02Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.33-3","1:1.33-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.2-1","1:2.4-1","1:2.4-1build1","1:2.5-1","1:2.5-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.8-1","1:2.10-1","1:2.10-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.15.2-1","1:2.16-3","1:2.16-3build1","1:2.17-1","1:2.17-2","1:2.18-1","1:2.18-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.22-1","1:2.22-2","1:2.23-1","1:2.23-1build1","1:2.23-1build2","1:2.23-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.24-6","1:2.26-1","1:2.26-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.26-2","1:2.28-1","1:2.28-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.26-2"]}],"products":[{"vendor":"fossil-scm","product":"fossil"}],"references":[{"url":"https://fossil-scm.org/home/doc/trunk/www/changes.wiki","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","report"]},{"url":"https://gainsec.com/2022/07/27/cve-2022-34009/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34009"},{"url":"https://github.com/advisories/GHSA-3632-grrp-f8wr"},{"url":"https://ubuntu.com/security/CVE-2022-34009","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34009","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-34009","description":"Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.","status":"published","published":"2022-07-27T23:23:51Z","modified":"2024-08-03T08:16:16.194Z","updated_at":"2026-11-02T14:34:42.028422Z"}],"euvd":[{"id":"EUVD-2022-37042","description":"Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.","status":"published","published":"2022-07-27T23:23:51Z","modified":"2024-08-03T08:16:16Z","updated_at":"2026-11-03T03:25:29.68115Z"}],"ghsa":[{"id":"GHSA-3632-grrp-f8wr","title":"Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS...","description":"Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.","status":"published","published":"2022-07-29T00:00:47Z","modified":"2023-01-27T05:06:40Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-436"],"updated_at":"2026-11-02T14:42:57.782632Z"}],"nvd":[{"id":"CVE-2022-34009","description":"Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.","status":"published","published":"2022-07-28T00:15:08.64Z","modified":"2026-06-17T04:49:39.24Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:24.037422Z"}],"osv":[{"id":"UBUNTU-CVE-2022-34009","description":"Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.","status":"published","published":"2022-07-28T00:15:00Z","modified":"2026-10-17T12:56:02.659356277Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"}]}}