CVE-2022-4957

Summary

CVE-2022-4957 is a newly identified vulnerability affecting librespeed speedtest versions up to 5.2.4. This issue lies within an unknown functionality of the file results/stats.php, which can be exploited through the manipulation of the id argument. The exploit enables attackers to launch cross-site scripting attacks remotely. To mitigate this risk, upgrading to version 5.2.5 is recommended. The patch, identified as a85f2c086f3449dffa8fe2edb5e2ef3ee72dc0e9, is available and should be implemented promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.