CVE-2022-39240 — Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph

CVE-2022-39240

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph PUBLISHED

Description (CNA)

MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround.

Affected (CNA)

Vendor / product	Versions
renlm / MyGraph	affected < 1.0.4

CWE

CWE-79, CWE-80

References

https://github.com/renlm/MyGraph/security/advisories/GHSA-hj4j-923h-927j

ADP enrichment

CVE

No English description supplied.

https://github.com/renlm/MyGraph/security/advisories/GHSA-hj4j-923h-927j

CISA-ADP

No English description supplied.

No references supplied.