CVE-2022-1045CWE-434

Stored XSS viva .svg file upload in polonel/trudesk

Critical · published April 11, 2022

CVSS v3.0
9.0
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.

The record
Technical detail
CVSS v3.0
9.0 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01586 · 75.4th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2022-04-11T06:15Z
EPSS history
Timeline
  • 11 APR 06:15Z
    Stored XSS viva .svg file upload in polonel/trudesk
    cvelistv5