Zinc

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:zinclabs:zinc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZinclabs (fca6fe8a-69db-51eb-a9de-119377d7eb25)
ProductZinc (e5806d04-2fe3-5d59-b4ab-9b8e214487d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zincsearch/zincsearch purl2cpe 2026-06-01 10:15:27.928441
pkg:golang/github.com/zincsearch/zincsearch purl2cpe 2026-06-01 10:15:27.928443
pkg:sourceforge/zinc-search-engine.mirror purl2cpe 2026-06-01 10:15:27.928444

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32172 vulnerable 2026-06-08 05:44:42.634464 Zinc - Cross-Site Scripting
In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete template functionality. When an authenticated user deletes a template with a XSS payload in the name field, the Javascript payload will be executed and allow an attacker to access the user’s credentials.
Published: 2022-10-06T17:13:36.407Z
Updated: 2024-09-16T22:02:26.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32171 vulnerable 2026-06-08 05:44:42.633988 Zinc - Stored XSS
In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete user functionality. When an authenticated user deletes a user having a XSS payload in the user id field, the javascript payload will be executed and allow an attacker to access the user’s credentials.
Published: 2022-10-06T17:14:15.732Z
Updated: 2024-09-17T01:41:50.446Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.