# sonatype-2022-0723

## xss at 17 January 2022 Malicious Package

**Published**: Feb 1, 2022  
**CVSS Score**: Critical 10.0

## Security Details
### Components Impacted

### sonatype-2022-0723 Security Details
- **CVE ID**: sonatype-2022-0723  
- **CWE**: N/A  
- **CVE Description**: xss at 17 January 2022 Malicious Package  
- **Published**: Feb 1, 2022  
- **CVSS Score & Severity**: 10.0 Critical  
- **CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
- **EPSS Score**: 0%

### Malware
- **KEV Status**: Not in KEV Catalog: No known exploits  
- **Affected Ecosystems**: affected  
- **Source**: Sonatype

### References
- [Sonatype Malware Data](https://help.sonatype.com/en/sonatype-malware-data.html)