CVEs-PoC/2022/CVE-2022-25220.md

CVE-2022-25220

Description

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding.

POC

Reference

• https://fluidattacks.com/advisories/armstrong/
• https://github.com/1modm/petereport/issues/35

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/karimhabush/cyberowl