CVE-2022-42466
XSS vulnerability, eg for String properties.
概要
XSS vulnerability, eg for String properties.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. In particular, the end-user could enter javascript or similar and this would be executed. As of this release, the inputted strings are properly escaped when rendered.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com