CVE-2022-23051

Publication date

2022-03-03 21:55:05

Family

Fluid Attacks

State

PUBLISHED

Description

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an Attack Tree by modifying the svg_file parameter.