Package · Debian

fava

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.0

CVE-2022-2523

Cross-site Scripting (XSS) - Reflected in beancount/fava

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2.

beancount beancount/fava fava fava Debian Ubuntu PyPI

Jul 25, 2022
High 8.0

CVE-2022-2514

Cross-site Scripting (XSS) - Reflected in beancount/fava

The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.

beancount beancount/fava fava fava Debian Ubuntu PyPI

Jul 25, 2022