CVE-2022-42466
XSS vulnerability, eg for String properties.
Résumé
XSS vulnerability, eg for String properties.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. In particular, the end-user could enter javascript or similar and this would be executed. As of this release, the inputted strings are properly escaped when rendered.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com