CVE-2022-23051

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an ‘Attack Tree’ by modifying the ‘svg_file’ parameter.

Date published : 2022-03-03

https://fluidattacks.com/advisories/brown/

https://github.com/1modm/petereport/issues/36