Vulnerability Description
Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Organizr | Organizr | < 2.1.1810 |
Related Weaknesses (CWE)
References
- https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecfPatchThird Party Advisory
- https://huntr.dev/bounties/781b5c2a-bc98-41a0-a276-ea12399e5a25ExploitPatchThird Party Advisory
- https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecfPatchThird Party Advisory
- https://huntr.dev/bounties/781b5c2a-bc98-41a0-a276-ea12399e5a25ExploitPatchThird Party Advisory
FAQ
What is CVE-2022-1345?
CVE-2022-1345 is a vulnerability with a CVSS score of 9.0 (CRITICAL). Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking,...
How severe is CVE-2022-1345?
CVE-2022-1345 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-1345?
Check the references section above for vendor advisories and patch information. Affected products include: Organizr Organizr.