XSS in Recipes
CVE-2022-23074
In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in the ‘Name’ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.008 (52.9th percentile) — read the EPSS interpretation.
Affected products
- Recipes — versions 0.17.0, unspecified
- Tandoor Recipes
Weakness classification (CWE)
References
- vulnerabilitylab@mend.io (Patch, Third Party Advisory, x_refsource_MISC)
- vulnerabilitylab@mend.io (Exploit, Third Party Advisory, x_refsource_MISC)