
Cloud Vulnerability DB
A community-led vulnerabilities database
A reflected Cross-site Scripting (XSS) vulnerability was discovered in the Phoronix Test Suite repository prior to version 10.8.2. The vulnerability was identified in February 2022 and assigned CVE-2022-0571. The Phoronix Test Suite is an automated, open-source testing framework designed for Linux operating systems (Fedora Update).
The vulnerability was classified as a reflected XSS issue (CWE-79) affecting the input validation mechanisms in the Phoronix Test Suite. The issue was specifically related to the handling of HTML encoded characters and other potentially malicious strings in the Phoromatic functions (GitHub Commit).
The vulnerability could allow attackers to execute malicious scripts through the web interface, potentially leading to unauthorized access to user data or session hijacking (CVE Details).
The vulnerability was patched in version 10.8.2 of the Phoronix Test Suite. The fix included additional input validation to reject HTML encoded characters and potentially dangerous strings such as 'document.write', '../', 'onerror', 'onload', and 'alert(' (GitHub Commit).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."