Skip to content
Sign in
Not rated

CVE-2022-23051 PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack…

Description

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.

Affected products and versions

Product Affected versions Fixed in
PeTeReport 0.5 No fix stated

Other CVEs of PeTeReport

The 3 CVEs of PeTeReport →
CVE-2022-25220 PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown… Not rated CVE-2022-23052 PeteReport Version 0.5 contains a Cross Site Request Forgery (CSRF) vulnerability allowing an attacker to trick users… Not rated
Track this CVE