4 matches found
CVE-2026-73220 CVAT: Stored XSS via annotation guides in audio tasks
CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes attacker-controlled guide Markdown to...
CVE-2026-73220
CVAT (open-source video and image annotation tool) is affected by a stored cross-site scripting (XSS) vulnerability in versions 2.68.0 through 2.70.0. The audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes atta...
CVE-2026-73220 CVAT: Stored XSS via annotation guides in audio tasks
CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes attacker-controlled guide Markdown to...
CVE-2026-73220: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes attacker-controlled guide Markdown to...