Caldera Security Vulnerabilities and Issues — Caldera CVE List

Lucene search

MitreCaldera

3 matches found

CVE•added 2022/10/17 9:15 p.m.•38 views

CVE-2022-40606

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605.

6.1CVSS5.8AI score0.00113EPSS

CVE•added 2022/10/17 8:15 p.m.•37 views

CVE-2022-40605

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606.

6.1CVSS5.8AI score0.00113EPSS

CVE•added 2022/10/17 8:15 p.m.•35 views

CVE-2022-41139

MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.

5.4CVSS5.5AI score0.00105EPSS