Medium severity · published Dec 27, 2022
CVE-2022-47968
Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page
5.4
CVSS
0.4%
EPSS
No
On KEV
Description
Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page. The stored XSS will be triggered in the "Application list" page.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HA
Heimdall Application Dashboard · Linuxserver
through 2.5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-47968
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-47968
Exploit
https://github.com/linuxserver/Heimdall/issues/1086
Third Party Advisory
https://samy.link/blog
More from Heimdall Application Dashboard
9.8
CVE-2024-51358
An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application
6.1
CVE-2025-54597
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter