Vulnerabilities

TI-2022-04452 CVE-2022-4859 · GHSA-92hm-c572-wrpc

Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting

LOW 28

A vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00533 Published 2022-12-30 No fix listed CWE-79

TI-2022-04164 CVE-2022-4560 · GHSA-8w8g-mvf3-8xmp

LOW 28

A vulnerability was found in Joget up to 7.0.31.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00564 Published 2022-12-16 No fix listed CWE-79

TI-2022-09626 CVE-2022-26197 · GHSA-6jm5-2wv4-fcqc

LOW 25

Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00567 Published 2022-03-25 No fix listed CWE-79