CVE-2022-2365: Cross-site Scripting (XSS) - Stored in zadam/trilium
Published Jul 10, 2022
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.53.3.
Affected Software
1 affected component
Trilium Project Trilium<0.53.3
Remediation
Event History
Jul 10, 2022
CVE Published
via MITRE·09:50 PM
Data Sourced
via MITRE·09:50 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-2365?
CVE-2022-2365 is a stored Cross-site Scripting (XSS) vulnerability in versions of Trilium prior to 0.53.3.
2
What is the severity of CVE-2022-2365?
CVE-2022-2365 has a moderate severity rating due to the potential for attackers to inject malicious scripts.
3
How do I fix CVE-2022-2365?
To fix CVE-2022-2365, upgrade Trilium to version 0.53.3 or later.
4
Who is affected by CVE-2022-2365?
Users of Trilium versions prior to 0.53.3 are affected by CVE-2022-2365.
5
What can an attacker do with CVE-2022-2365?
An attacker exploiting CVE-2022-2365 can execute malicious scripts in the context of the affected user's session.