CVE-2022-30899

2022-06-0816:15:08

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the ‘name’ field in /api/part_categories.

CPENameOperatorVersion
partkeepreq0.1.3
partkeepreq0.1.2
partkeepreq0.1.8
partkeepreq0.1.7
partkeepreq0.81
partkeepreq0.1.1
partkeepreqhel
partkeepreq0.1.6.1
partkeepreq1.4.0
partkeepreq0.1

Name	Operator	Version
partkeepr	eq	0.1.3
partkeepr	eq	0.1.2
partkeepr	eq	0.1.8
partkeepr	eq	0.1.7
partkeepr	eq	0.81
partkeepr	eq	0.1.1
partkeepr	eq	hel
partkeepr	eq	0.1.6.1
partkeepr	eq	1.4.0
partkeepr	eq	0.1