Vulnerabilities

TI-2022-01954 CVE-2022-2113 · GHSA-j5vv-p22h-45m3

Cross-site Scripting (XSS) - Stored in inventree/inventree

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.7.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00803 Published 2022-06-17 Fixed in 0.7.2 CWE-79

TI-2022-01953 CVE-2022-2112 · GHSA-9hx5-jmxv-x44q

MEDIUM 41

Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01303 Published 2022-06-17 Fixed in 0.7.2 CWE-1236

TI-2022-01952 CVE-2022-2111 · GHSA-fr2w-mp56-g4xp

MEDIUM 41

Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01258 Published 2022-06-17 Fixed in 0.7.2 CWE-434