CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Cvelist•added 2022/09/29 9:25 a.m.•45 views

CVE-2022-3355 Cross-site Scripting (XSS) - Stored in inventree/inventree

Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.8.3...

8.2CVSS5.5AI score0.00852EPSS

SaveExploits1References2

Vulnrichment•added 2022/09/29 9:25 a.m.•8 views

CVE-2022-3355 Cross-site Scripting (XSS) - Stored in inventree/inventree

Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.8.3...

8.2CVSS5.3AI score0.00852EPSS

SaveExploits1References2

CVE•added 2022/09/29 9:25 a.m.•85 views

CVE-2022-3355

CVE-2022-3355 is a stored XSS vulnerability in Inventree (inventree/inventree) prior to version 0.8.3. The issue arises from uploading SVG files, allowing a attacker to inject scripts that are stored and executed when the uploaded file is accessed. A patch exists in version 0.8.3 and later; a tem...

8.2CVSS6.8AI score0.00852EPSS

SaveExploits1References2Affected Software1

OSV•added 2022/09/29 9:25 a.m.•37 views

CVE-2022-3355 Cross-site Scripting (XSS) - Stored in inventree/inventree

Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.8.3...

8.2CVSS7.4AI score

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by