Lucene search
Saharshtapi4CAE8442-C042-43C2-AD89-6F666EAF3D57HistoryJun 11, 2022 - 8:44 a.m.
Stored XSS in Part Description
2022-06-1108:44:40
saharshtapi
www.huntr.dev
8
0.001 Low
EPSS
Percentile
21.4%
Description
The application inventree is vulnerable to Stored XSS in part description field.
Proof of Concept
Video PoC link:
https://drive.google.com/file/d/1ZFgWiVpalxZ8zGeDrErezjZCQjB3VP-w/view?usp=sharing
Related
cnvd
cnvd
InvenTree Cross-Site Scripting Vulnerability
2022-06-21 00:00:00
osv
osv
CVE-2022-2113
2022-06-17 13:15:13
cve
cve
CVE-2022-2113
2022-06-17 13:15:13
prion
prion
Cross site scripting
2022-06-17 13:15:00
cvelist
cvelist
CVE-2022-2113 Cross-site Scripting (XSS) - Stored in inventree/inventree
2022-06-17 10:20:10
nvd
nvd
CVE-2022-2113
2022-06-17 13:15:13
fedora
fedora
[SECURITY] Fedora 36 Update: microcode_ctl-2.1-51.fc36
2022-05-12 01:13:57
[SECURITY] Fedora 35 Update: microcode_ctl-2.1-47.3.fc35
2022-05-12 01:20:54
[SECURITY] Fedora 34 Update: microcode_ctl-2.1-46.3.fc34
2022-05-19 01:01:19