VDB
CVE-2022-29248
CVE-2022-29248
PUBLISHED
Cross-domain cookie leakage in Guzzle
EPSS 0.64% · 70.9th percentile
Risk Scores
EPSS Score
0.64%
70.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | drupal | 9.2.0, 9.3.0, 9.2.0 |
| Bitnami | drupal | 9.2.0, 9.3.0 |
Timeline
- May 25, 2022 CVE Published
- May 26, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 2, 2022 EPSS Score
- Oct 20, 2022 EPSS Score
- Dec 8, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 16, 2023 EPSS Score
- May 3, 2023 EPSS Score
- Jun 21, 2023 EPSS Score
- Jul 21, 2023 CVE Updated
- Aug 9, 2023 EPSS Score
References
- https://github.com/guzzle/guzzle/commit/74a8602c6faec9ef74b7a9391ac82c5e65b1cdab url
- https://github.com/guzzle/guzzle/pull/3018 url
- https://github.com/guzzle/guzzle/security/advisories/GHSA-cwmx-hcrq-mhc3 url
- https://www.debian.org/security/2022/dsa-5246 url
- https://www.drupal.org/sa-core-2022-010 url
- https://nvd.nist.gov/vuln/detail/CVE-2022-29248 url