CVE-2018-10314 is a medium-severity cross-site scripting (XSS) vulnerability affecting Open-AudIT Community version 2.2.0. An authenticated attacker can inject malicious web script or HTML by manipulating a component's name, specifically demonstrated through the 'action' parameter in the Discover -> Audit Scripts -> List Scripts -> Download section. This vulnerability has a CVSS score of 5.4, indicating a network-based attack with low complexity, requiring user interaction, and potentially leading to limited confidentiality and integrity impacts. While not listed in CISA's KEV catalog or actively exploited in the wild, public exploit code is available via ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.2.0CPE matchmatch criteria | cpe:2.3:a:opmantek:open-audit:2.2.0:*:*:*:community:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.