CVE-2022-43706

2022-12-0500:00:00

mitre

www.cve.org

cross-site scripting

stackstorm

web ui

version 3.8.0

vulnerability

logged in users

write access

pack rules

0.001 Low

EPSS

Percentile

23.0%

JSON

Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users with write access to pack rules to inject arbitrary script or HTML that may be executed in Web UI for other logged in users.

References

stackstorm.com/2022/12/v3-8-0-released/

0.001 Low

EPSS

Percentile

23.0%

JSON

Related for CVELIST:CVE-2022-43706