CVE-2022-30110

2022-05-1714:15:08

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users’ browser.

CPENameOperatorVersion
jirafeaueq3.4.1
jirafeaueq4.1.0
jirafeaueq4.1.1
jirafeaueq1.0
jirafeaueq3.3.0
jirafeaueq3.1.0
jirafeaueq4.3.0
jirafeaueq3.0.0
jirafeaueq4.2.0
jirafeaueq1.1