Executive brief
Known v1.3.1 Cross-site Scripting
Affected products
- Packagist idno/known
Junglewise Threat Intelligence
CVE-2022-31290: Known v1.3.1 Cross-site Scripting
CVE-2022-31290 · Severity: low · CVSS 3.1 · Published 2022-07-09
Technologies: idno/known (Packagist). Vendors: Packagist.
Related threats
- Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
- Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
- Known affected by Account Takeover via Password Reset Token Leakage
- Known vulnerable to code execution via SVG file in v1.3.1
- Known vulnerable to account takeover via host header injection attack in v1.3.1