CVE-2022-1351: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

April 14, 2022 (updated April 21, 2022)

Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4.

References

github.com/pimcore/pimcore/commit/8c39a8b8f14dce078b31f61c4da599ca6f8fc7ac
huntr.dev/bounties/c23ae6c2-2e53-4bf5-85b0-e90418476615
nvd.nist.gov/vuln/detail/CVE-2022-1351

Detect and mitigate CVE-2022-1351 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →