Description
PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PeTeReport | 0.5 | — |
Unscored
CVE-2022-23051
EUVD-2022-28161GHSA-9rwp-j6mp-jgwf
PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying t…
Published Mar 3, 2022 · Updated Aug 3, 2024 · Assigned by Fluid Attacks