CVE-2022-2029

CVE-2022-2029 affects the TITRA project (kromitgmbh/titra) prior to version 0.77.0. A DOM-based XSS issue is described, enabling script injection via the DOM handling in the web UI. The vulnerability is confirmed across multiple feeds (NVD, Red Hat, OSV, CVE records) with sources citing a DOM XSS...

CVE-2022-2029 Cross-site Scripting (XSS) - DOM in kromitgmbh/titra

Cross-site Scripting XSS - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0...

Stored XSS in Task field

Description The application Titra is vulnerable to Stored XSS in Task field. Steps To Reproduce 1. Click on add Track button 2. In the Task field enter the payload " 3. click save 4. Now Click on Details 5. XSS will be triggered Image PoC...

Stored XSS in Project Name

Description The application Titra is vulnerable to Stored XSS in Project name field. Steps To Reproduce 1. Click on Edit button 2. Under the Project Name enter the paylaod " 3. Click on save. 4. Now navigate to details the XSS will be triggered. Image PoC...

Stored XSS in Name

Description The application Titra is vulnerable to Stored XSS in user's name field. Proof of Concept Go to profile and under the name put the payload " Video POC: https://drive.google.com/file/d/1MHPloy-i2hsxaLuuVn46oUZVpFm6Nywf/view?usp=sharing...