Vulnerability Description
Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Organizr | Organizr | < 2.1.1810 |
Related Weaknesses (CWE)
References
- https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecfPatchThird Party Advisory
- https://huntr.dev/bounties/35f66966-af13-4f07-9734-0c50fdfc3a8cExploitPatchThird Party Advisory
- https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecfPatchThird Party Advisory
- https://huntr.dev/bounties/35f66966-af13-4f07-9734-0c50fdfc3a8cExploitPatchThird Party Advisory
FAQ
What is CVE-2022-1344?
CVE-2022-1344 is a vulnerability with a CVSS score of 9.0 (CRITICAL). Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to s...
How severe is CVE-2022-1344?
CVE-2022-1344 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-1344?
Check the references section above for vendor advisories and patch information. Affected products include: Organizr Organizr.