Detections
Analytics
SCA: security update for pyRdfa3 (GHSA-894q-wpg5-mf2h)
medium Tenable Cloud Security Plugin ID 421765
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function
_get_option of the file pyRdfa/__init__.py. The manipulation leads to cross site scripting. The attack may
be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e. It is
recommended to apply a patch to fix this issue. The identifier VDB-215249 was assigned to this
vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the
maintainer. (CVE-2022-4396)
See Also
Plugin Details
Severity: Medium
ID: 421765
Version: Revision 1.5
Type: Local
Family: SCA Checks
Published: 3/28/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.3
Percentile: 8.67
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N
CVSS Score Source: CVE-2022-4396
CVSS v3
Risk Factor: Medium
Base Score: 5.4
Temporal Score: 4.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 12/10/2022
Vulnerability Publication Date: 12/10/2022
Reference Information
CVE: CVE-2022-4396