{"id":"CVE-2022-40704","aliases":["EUVD-2022-43975","GHSA-9447-mqqf-hxwj","MGASA-2023-0022","UBUNTU-CVE-2022-40704","openSUSE-SU-2024:12555-1"],"status":"published","title":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","description":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00629,"percentile":0.50415,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2023-01-17T00:00:00Z","modified":"2026-10-28T02:31:07Z","fixes":[{"ecosystem":"Mageia:8","package":"phoronix-test-suite","fixed_in":["10.8.2-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"phoronix-test-suite","fixed_in":["10.8.4-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:8","package":"phoronix-test-suite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.8.2-1.1.mga8"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"phoronix-test-suite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1-1","5.2.1-1ubuntu1","5.2.1-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"phoronix-test-suite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1-1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"phoronix-test-suite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.8.4-3.1"}]}]}],"products":[{"vendor":"phoronix-media","product":"phoronix_test_suite"}],"references":[{"url":"https://github.com/phoronix-test-suite/phoronix-test-suite/issues/650","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://github.com/phoronix-test-suite/phoronix-test-suite/commit/d3880d9d3ba795138444da83f1153c3c3ac27640","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40704","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9447-mqqf-hxwj"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40704.json","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0022.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31423","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ETFF53AECMDP6PTNUVVCOODN3HMOETUU/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-40704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40704","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40704","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-40704","description":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","status":"published","published":"2023-01-17T00:00:00Z","modified":"2025-04-04T19:41:57.75Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:30.493103Z"}],"euvd":[{"id":"EUVD-2022-43975","description":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","status":"published","published":"2023-01-17T00:00:00Z","modified":"2025-04-04T19:41:57Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:42.001814Z"}],"ghsa":[{"id":"GHSA-9447-mqqf-hxwj","title":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","description":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","status":"published","published":"2023-01-17T21:30:22Z","modified":"2023-01-24T21:30:43Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:41:42.013329Z"}],"nvd":[{"id":"CVE-2022-40704","description":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","status":"published","published":"2023-01-17T19:15:11.53Z","modified":"2026-06-17T05:01:52.497Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:35.157734Z"}],"osv":[{"id":"CVE-2022-40704","description":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","status":"published","published":"2023-01-17T00:00:00Z","modified":"2026-10-28T02:31:07.658428132Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:44:26.860704Z"},{"id":"UBUNTU-CVE-2022-40704","description":"A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.","status":"published","published":"2023-01-17T19:15:00Z","modified":"2025-10-24T04:53:51Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"MGASA-2023-0022","title":"Updated phoronix-test-suite packages fix security vulnerability","description":"XSS in phoromatic_r_add_test_details.php (CVE-2022-40704)\n","status":"published","published":"2023-01-24T07:58:25Z","modified":"2026-04-16T04:41:05.990745632Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12555-1","title":"phoronix-test-suite-10.8.4-3.1 on GA media","description":"These are all security issues fixed in the phoronix-test-suite-10.8.4-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:27.409629Z","updated_at":"2026-11-02T16:58:35.751245Z"}]}}