CVE-2022-4586: Oc-SERVER3 Project Oc-SERVER3

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability classified as problematic was found in Opencaching Deutschland oc-server3. This vulnerability affects unknown code of the file htdocs/templates2/ocstyle/cachelists.tpl of the component Cachelist Handler. The manipulation of the argument name_filter/by_filter leads to cross site scripting. The attack can be initiated remotely. The name of the patch is a9f79c7da78cd24a7ef1d298e6bc86006972ea73. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216172.

Affected products

Published 2022-12-17. Last modified 2026-06-17.