66 matches found
fava 跨站脚本漏洞
fava is the web interface of Beancount, an open source double-entry bookkeeping software from Beancount. A cross-site scripting vulnerability exists in versions prior to fava v1.22, which stems from the time and filter parameters being vulnerable to reflective cross-site scripting...
CVE-2022-2523: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2...
CVE-2022-2514: Improper Neutralization of Input During Web Page Generation
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim...
fava 跨站脚本漏洞
fava is the web interface for Beancount, a double-entry bookkeeping software open source by Beancount. A security vulnerability exists in versions prior to fava 1.22.2. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
Reflected XSS in fava application
Description The "querystring" parameter of fava application is vulnerable to reflected XSS for which a attacker can modify any information that the user is able to modify. Proof of Concept 1.Open the url:...