Lucene search
Veracode Vulnerability DatabaseVERACODE:36546HistoryAug 01, 2022 - 6:46 a.m.
Cross-Site Scripting (XSS)
2022-08-0106:46:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
cross-site scripting
github
velocidex
velociraptor
completer function
syntax.js
improper sanitization
description field
malicious javascript
vulnerability
attacker
execute
software
0.001 Low
EPSS
Percentile
22.7%
github.com/velocidex/velociraptor is vulnerable to cross-site scripting. The vulnerability exists in the Completer function in syntax.js due to improper sanitization in the description field which allows an attacker to inject and execute malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/velocidex/velociraptor | le | v0.6.5-0 | |
| github.com/velocidex/velociraptor | le | v0.6.5-0 |
Related
nvd
nvd
CVE-2022-35632
2022-07-29 17:15:09
cvelist
cvelist
CVE-2022-35632 XSS in User Interface
2022-07-26 00:00:00
prion
prion
Cross site scripting
2022-07-29 17:15:00
cve
cve
CVE-2022-35632
2022-07-29 17:15:09
rapid7blog
rapid7blog
CVE-2022-35629..35632 Velociraptor Multiple Vulnerabilities (FIXED)
2022-07-26 17:15:00