Code injection

2022-03-0322:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

JSON

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an ‘Attack Tree’ by modifying the ‘svg_file’ parameter.

CPENameOperatorVersion
petereporteq0.5

CPE	Name	Operator	Version
	petereport	eq	0.5

References

fluidattacks.com/advisories/brown/

github.com/1modm/petereport/issues/36