← Database

CVE-2022-23051

MEDIUM CVSS: 5.4 Published: 2022-03-03 Modified: 2026-06-17

Description

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.

Affected Platforms

Petereport Project Petereport

Weakness Type

CWE-79

References