Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-30110
HistoryMay 17, 2022 - 2:15 p.m.

Cross site scripting

2022-05-1714:15:00
PRIOn knowledge base
www.prio-n.com
4

0.001 Low

EPSS

Percentile

31.3%

The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users’ browser.

CPENameOperatorVersion
jirafeault4.4.0

0.001 Low

EPSS

Percentile

31.3%

Related for PRION:CVE-2022-30110