CVE-2022-2290 - Cross-site Scripting (XSS) - Reflected in zadam/trilium

MEDIUM

Cross-site Scripting (XSS) - Reflected in zadam/trilium

Published Jul 3, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 2.92%

Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<0.53.1-beta
0.52.4	unaffected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/zadam/trilium/commit/3faae63b849a1fabc31b823bb7af3a84d32256a7		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/367c5c8d-ad6f-46be-8503-06648ecf09cf		x_refsource_CONFIRMExploitThird Party Advisory