Lucene search

K
osvGoogleOSV:CVE-2022-1290
HistoryApr 10, 2022 - 4:15 p.m.

CVE-2022-1290

2022-04-1016:15:07
Google
osv.dev
11
cve-2022-1290
stored xss
github
polonel/trudesk
v1.2.0
session hijacking
sensitive data exposure
malicious scripts
security flaw

AI Score

6

Confidence

High

EPSS

0.001

Percentile

21.4%

Stored XSS in “Name”, “Group Name” & “Title” in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user’s browser and it can lead to session hijacking, sensitive data exposure, and worse.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

21.4%

Related for OSV:CVE-2022-1290