Zephyr Cross-Site Scripting Vulnerability

Zephyr is Zephyr Project open source a scalable real-time operating system RTOS. A cross-site scripting vulnerability exists in Zephyr Project Manager versions prior to 3.2.5, which stems from a lack of effective filtering and escaping of user-supplied data in the onanimationstart parameter, and...

CVE-2022-3333: Improper Neutralization

A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler. The manipulation of the argument onanimationstart leads to cross site scripting. It is possible ...