medium5.4
CVE-2022-23051
PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parame…
Impact
PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Petereport Project | Petereport | Version 0.5 |