CVE-2022-4902
eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting
Résumé
eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 3.3.0-20220417 is able to address this issue. The name of the patch is 26bf307d3658d1403cfd5c3ad423ce4c4d1cb2dc. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-220212.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- patch github.com
- patch github.com
- report github.com
- report vuldb.com
- web community.exoplatform.com