Lucene search
K

4 matches found

NVD
NVD
added 2022/05/20 12:15 p.m.15 views

CVE-2022-25224

Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens the site in the current frame allowing an attacker to host JavaScript code in the malicious link in order to trigger an XSS attack. The 'nodeIntegration'...

5.4CVSS0.00653EPSS
Exploits1References1
Prion
Prion
added 2022/05/20 12:15 p.m.17 views

Design/Logic Flaw

Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens the site in the current frame allowing an attacker to host JavaScript code in the malicious link in order to trigger an XSS attack. The 'nodeIntegration'...

3.5CVSS5.1AI score0.00653EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/05/20 11:4 a.m.11 views

CVE-2022-25224

Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens the site in the current frame allowing an attacker to host JavaScript code in the malicious link in order to trigger an XSS attack. The 'nodeIntegration'...

5.4CVSS5.8AI score0.00653EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/05/20 11:4 a.m.22 views

CVE-2022-25224

Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens the site in the current frame allowing an attacker to host JavaScript code in the malicious link in order to trigger an XSS attack. The 'nodeIntegration'...

5.4AI score0.00653EPSS
Exploits1References1
Rows per page
Query Builder