Security Advisory

CVE-2022-23051

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-03 21:55:05

Last updated 2024-08-03 03:28:43

Assigner Fluid Attacks

CVSS score not scored

State PUBLISHED

Description

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.

← Browse all CVEs View on cve.org ↗