Fava Project Fava
3 CVEs affecting Fava Project Fava. Latest disclosed: 2022-08-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2589 | Medium | 6.1 | 2022-08-01 | Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3. |
CVE-2022-2523 | Medium | 6.1 | 2022-07-25 | Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2. |
CVE-2022-2514 | Medium | 6.1 | 2022-07-25 | The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the paramet… |