{"id":"CVE-2022-23081","summary":"Openlibrary - Reflected XSS","details":"In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS.","modified":"2026-08-12T03:51:29.489968535Z","published":"2022-06-22T17:20:12.255Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23081.json","cna_assigner":"Mend","cwe_ids":["CWE-79"]},"references":[{"type":"WEB","url":"https://github.com/internetarchive/openlibrary/pull/6597/commits/5460c8e8b517ef83c6a3b33654ba43ef0cbf051e"},{"type":"WEB","url":"https://www.mend.io/vulnerability-database/CVE-2022-23081"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23081.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23081"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/internetarchive/openlibrary","events":[{"introduced":"3b940e95fa1f06b819ee32b9487748c5e7ba3dec"},{"last_affected":"d3044fe29bbf850b5c8adda9425ee3a14dff9328"}],"database_specific":{"cpe":"cpe:2.3:a:openlibrary:openlibrary:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2016-07-0"},{"last_affected":"2021-12-22"}],"source":"CPE_RANGE"}}],"versions":["deploy-2019-10-16/sponsorship","deploy-2021-12-22","deploy-2021-12-21","deploy-2021-12-09","deploy-2021-11-30","deploy-2021-11-11","deploy-2021-10-28","deploy-2021-10-26","deploy-2021-10-05","deploy-2021-09-23","deploy-2021-09-07","deploy-2021-08-19","deploy-2021-08-17","deploy-2021-08-09","deploy-2021-08-04","deploy-2021-08-03","deploy-2021-07-07","deploy-2021-06-30","deploy-2021-06-29","deploy-2021-06-28","deploy-2021-05-27","deploy-2021-05-14","deploy-2021-05-13","deploy-2021-05-06","deploy-2021-04-28","deploy-2021-04-21","deploy-2021-04-15","deploy-2021-04-08","deploy-2021-03-24","deploy-2021-03-16","deploy-2021-03-04","deploy-2021-02-23","deploy-2021-02-12","deploy-2021-02-04","deploy-2021-01-25","deploy-2021-01-15","deploy-2021-01-14","deploy-2021-01-07","deploy-2020-12-23","deploy-2020-12-10","deploy-2020-12-02","deploy-2020-11-30","deploy-2020-11-17","deploy-2020-11-04","deploy-2020-10-19","deploy-2020-10-07","deploy-2020-09-21","deploy-2020-09-15","deploy-2020-08-25","deploy-2020-08-21","deploy-2020-07-21","deploy-2020-07-14","deploy-2020-05-12","deploy-2020-05-05","deploy-2020-04-28","deploy-2020-04-21","deploy-2020-04-14","deploy-2020-04-07","deploy-2020-03-31","deploy-2020-03-24","deploy-2020-03-17","deploy-2020-03-10","deploy-2020-03-06","deploy-2020-03-03","deploy-2020-02-25","deploy-2020-02-18","deploy-2020-02-11","deploy-2020-02-04","deploy-2020-01-29","deploy-2020-01-28","deploy-2020-01-21","deploy-2020-01-16","deploy-2020-01-09","deploy-2019-12-23","deploy-2019-12-20","deploy-2019-12-12","deploy-2019-12-05","deploy-2019-11-21","deploy-2019-11-11","deploy-2019-10-09","deploy-2019-10-02","deploy-2019-08-20","deploy-2019-06-14","deploy-2019-06-07","deploy-2019-05-16","deploy-2019-04-09","deploy-2019-03-25","deploy-2018-03-08","deploys-2018-10-16","deploy-2018-01-23","deploy-2018-01-13","deploy-2018-01-07","deploy-2017-12-25","deploy-2017-12-08","deploy-2017-10-28","deploy-2017-08-21","deploy-2017-06-14","deploy-2017-05-25","deploy-2017-04-29","deploy-2017-04-10","deploy-2017-04-06","deploy-2017-02-14","deploy-2017-02-10","deploy-2016-12-20","deploy-2016-12-16","deploy-2016-12-14","deploy-2016-12-06","deploy-2016-12-01","deploy-2016-11-28","deploy-2016-11-23b","deploy-2016-11-23","deploy-2016-11-22","deploy-2016-11-17","deploy-2016-11-14","deploy-2016-11-10","deploy-2016-10-25","deploy-2016-10-15","deploy-2016-10-14","deploy-2016-09-20","deploy-2016-08-17","deploy-2016-08-05","deploy-2016-08-02","deploy-2016-07-28","deploy-2016-07-06"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23081.json"}}],"schema_version":"1.9.0"}