CVE-2023-4892
Teedy v1.11 - Stored cross-site scripting (XSS)
概要
Teedy v1.11 - Stored cross-site scripting (XSS)
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Teedy v1.11 has a vulnerability in its text editor that allows events
to be executed in HTML tags that an attacker could manipulate. Thanks
to this, it is possible to execute malicious JavaScript in the webapp.
参照URL
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- web teedy.io