CVE-2022-24762Disclosure(sysend.js_project / sysend.js)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

sysend.js is a library that allows a user to send messages between pages that are open in the same browser. Users that use cross-origin communication may have their communications intercepted. Impact is limited by the communication occurring in the same browser. This issue has been patched in sysend.js version 1.10.0. The only currently known workaround is to avoid sending communications that a user does not want to have intercepted via sysend messages.

sysend.js_project CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

Vendor / third-party advisories

Weakness type (CWE)

CWE-200CWE-346

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sysend.js

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

sysend.js_project

Products

sysend.js

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://dailycve.com/viewcomponent-insecure-method-dispatch-leads-to-arbitrary-template-rendering-cve-2022-24762-high/

Full discourse1 post

DailyCVE@dailycve153d
Disclosure
🔴 ViewComponent, Insecure Method Dispatch leads to Arbitrary Template Rendering, #CVE-2022-24762 (High) https://dailycve.com/viewcomponent-insecure-method-dispatch-leads-to-arbitrary-template-rendering-cve-2022-24762-high/
Post summary
The post announces CVE‑2022‑24762, a high‑severity vulnerability in ViewComponent that enables arbitrary template rendering via insecure method dispatch, but offers no further details on PoC, exploitation, or mitigation.
0000018
198 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	sysend.js_project	sysend.js	-	node.js	-

Explore more

Back to dashboard sysend.js_project CVEs sysend.js vulnerabilities