CVE-2022-3355 - Cross-site Scripting (XSS) - Stored in inventree/inventree

MEDIUM

Cross-site Scripting (XSS) - Stored in inventree/inventree

Published Sep 29, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.85%

Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.8.3.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<0.8.3

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6715		Advisory
https://github.com/advisories/GHSA-62g7-fpv9-v95f		Advisory
https://github.com/inventree/InvenTree/releases/tag/0.8.3
https://github.com/inventree/inventree/commit/5a08ef908dd5344b4433436a4679d122f7f99e41		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/4b7fb92c-f06b-4bbf-82dc-9f013b30b6a6		x_refsource_CONFIRMExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-3355