CVE-2023-4892
Teedy v1.11 - Stored cross-site scripting (XSS)
Résumé
Teedy v1.11 - Stored cross-site scripting (XSS)
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Teedy v1.11 has a vulnerability in its text editor that allows events
to be executed in HTML tags that an attacker could manipulate. Thanks
to this, it is possible to execute malicious JavaScript in the webapp.
Références
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- web teedy.io