← All advisories

Critical severity9.0NVD Advisory· Published Apr 27, 2022· Updated Jun 17, 2026

CVE-2022-28464

CVE-2022-28464

Description

Apifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code execution.

Affected products

3

Apifox/Apifox3 versions
cpe:2.3:a:apifox:apifox:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apifox:apifox:*:*:*:*:*:*:*:*range: <=2.1.6
- (no CPE)
- (no CPE)range: <=2.1.6

Patches

Vulnerability mechanics

References

1

www.yuque.com/docs/share/b3115557-2dce-4897-b297-454c6df89d18nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.