# CVEs published 2022-09-17

5 CVEs were published on September 17, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2022-3232](https://cve.now/CVE-2022-3232.md): Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb (CVSS 6.5, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-39960](https://cve.now/CVE-2022-39960.md): The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. (no CVSS)
- [CVE-2022-3231](https://cve.now/CVE-2022-3231.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 5.6, librenms/librenms)
- [CVE-2022-3173](https://cve.now/CVE-2022-3173.md): Improper Authentication in snipe/snipe-it (CVSS 4.3, snipe/snipe-it)
- [CVE-2022-3234](https://cve.now/CVE-2022-3234.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8, vim/vim)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.