beancount

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

beancount records in CISA KEV

No beancount vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fava 3 records LOW

Records

3 records

TI-2022-02391 CVE-2022-2589 · GHSA-6hcj-qrw3-m66q

Cross-site Scripting (XSS) - Reflected in beancount/fava

LOW 29

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00752 Published 2022-08-01 Fixed in 1.22.3 CWE-79

TI-2022-02332 CVE-2022-2523 · GHSA-q8hg-3vqv-f8v3

Cross-site Scripting (XSS) - Reflected in beancount/fava

LOW 29

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00867 Published 2022-07-25 Fixed in 1.22.2 CWE-79

TI-2022-02323 CVE-2022-2514 · GHSA-xrf4-39fm-j5f2

Cross-site Scripting (XSS) - Reflected in beancount/fava

LOW 29

The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00874 Published 2022-07-25 Fixed in 1.22 CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0