CVE-2022-23051

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svgfile' parameter...

CVE-2022-23051

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svgfile' parameter...

CVE-2022-23051

PeteReport Version 0.5 contains an authenticated-admin Cross-Site Scripting (XSS) vulnerability: by modifying the svg_file parameter while adding an Attack Tree, an admin can inject persistent JavaScript. The issue stems from lack of filtering/escaping of user data. Affected product appears to be...

PT-2022-15812

Name of the Vulnerable Software and Affected Versions PeteReport version 0.5 Description The issue allows an attacker to trick users into deleting users, products, reports, and findings on the application through a Cross Site Request Forgery CSRF vulnerability. This means an attacker can forge...

PeTeReport 跨站请求伪造漏洞

PeTeReport is an open source application vulnerability reporting tool. Designed to assist penetration testing/red team efforts by simplifying the task of report writing and generation, PeTeReport suffers from a cross-site request forgery vulnerability that could be exploited by attackers to trick...

CVE-2022-23052: Cross-Site Request Forgery (CSRF)

PeteReport Version 0.5 contains a Cross Site Request Forgery CSRF vulnerability allowing an attacker to trick users into deleting users, products, reports and findings on the application...

CVE-2022-23051: Improper Neutralization of Input During Web Page Generation

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svgfile' parameter...

CVE-2022-25220: Improper Neutralization of Input During Web Page Generation

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding...

PT-2022-17159

Name of the Vulnerable Software and Affected Versions PeteReport version 0.5 Description The issue allows an authenticated admin user to inject persistent JavaScript code inside markdown descriptions when creating a product, report, or finding. Recommendations For PeteReport version 0.5, consider...

PT-2022-15811

Name of the Vulnerable Software and Affected Versions PeteReport version 0.5 Description The issue allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the svg file parameter. This enables the execution of malicious code, potentially...