Lucene search
K

5 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:34 a.m.2 views

SUSE CVE-2022-1231

XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code execution for example in desktop...

6.1CVSS6.7AI score0.01779EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2022/04/15 3:15 p.m.15 views

CVE-2022-1231

XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code execution for example in desktop...

9.3CVSS7.3AI score0.01779EPSS
Exploits1References4
Prion
Prion
added 2022/04/15 3:15 p.m.19 views

Format string

XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code execution for example in desktop...

4.3CVSS7.7AI score0.01779EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2022/04/15 3:15 p.m.0 views

UBUNTU-CVE-2022-1231

XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code execution for example in desktop...

9.3CVSS6.2AI score0.01779EPSS
Exploits1References5
Cvelist
Cvelist
added 2022/04/15 3:5 p.m.47 views

CVE-2022-1231 XSS via Embedded SVG in SVG Diagram Format in plantuml/plantuml

XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code execution for example in desktop...

9.3CVSS6.5AI score0.01779EPSS
Exploits1References4
Rows per page
Query Builder