Inventree vulnerable to Stored Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-3355 · ADVISORY
• inventree/inventree commit 5a08ef9 · WEB
• inventree/InvenTree release 0.8.3 · WEB
• inventree/inventree · PACKAGE
• huntr.dev/bounties/4b7fb92c-f06b-4bbf-82dc-9f013b30b6a6 · WEB
• pypi.org/project/inventree · PACKAGE
• GitHub Advisory GHSA-62g7-fpv9-v95f · ADVISORY

Lỗ hổng khác của inventree

• GHSA-vx3h-qwqw-r2wqTRUNG BÌNH 4.3Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
• GHSA-85q9-7467-r53qCAOXSS Vulnerability in Markdown Editor
• CVE-2022-2112CAO 8.8Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2.
• CVE-2022-2111CAO 8.8Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2.
• GHSA-7rq4-qcpw-74gqTRUNG BÌNHFormula Injection in Exported Data