Security Advisory
CVE-2022-41139
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.