TI-2022-02391 CVE-2022-2589 · GHSA-6hcj-qrw3-m66q
Cross-site Scripting (XSS) - Reflected in beancount/fava
Priority LOW 29
Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3.
Vulnerabilities
3 records
TI-2022-02332 CVE-2022-2523 · GHSA-q8hg-3vqv-f8v3
Cross-site Scripting (XSS) - Reflected in beancount/fava
Priority LOW 29
Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2.
TI-2022-02323 CVE-2022-2514 · GHSA-xrf4-39fm-j5f2
Cross-site Scripting (XSS) - Reflected in beancount/fava
Priority LOW 29
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.