Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-35632
HistoryJul 29, 2022 - 5:15 p.m.

Cross site scripting

2022-07-2917:15:00
PRIOn knowledge base
www.prio-n.com
velociraptor
gui
editor
xss
vulnerability
patched
version 0.6.5-2

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to cross-site scripting (XSS). This issue was resolved in Velociraptor 0.6.5-2.

CPENameOperatorVersion
velociraptoreq< 0.6.5-2

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

Related for PRION:CVE-2022-35632