Description
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.
Medium · 5.4
CVE-2022-41139
EUVD-2022-44380
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary co…
Published Oct 17, 2022 · Updated May 14, 2025 · Assigned by mitre