CVE-2022-31113 describes a Cross-Site Scripting (XSS) vulnerability in the history page of triggered Canarytokens, an open-source network activity tracking tool. An attacker who discovers an HTTP-based Canarytoken URL can inject JavaScript into its history page, which executes when the token's creator later views that page. This medium-severity vulnerability (CVSS 6.1) allows for actions like disabling/deleting the token, viewing its activation history, or potentially revealing the creator's email or network location. While the issue has been patched and no active exploitation has been observed, there are no known workarounds, and no public exploit code or significant community discussion exists.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2022-07-01CPE matchmatch criteria | cpe:2.3:a:thinkst:canarytokens:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.