Cross-site Scripting (XSS)

2022-08-0103:39:17

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

velociraptor

vulnerability

javascript injection

artifact collection

EPSS

0.001

Percentile

31.3%

JSON

github.com/velocidex/velociraptor is vulnerable to cross-site scripting. The vulnerability exists in multiple functions in artifacts/syntax.js because the variables are not properly escaped in artifact collection report which allows an attacker to inject and execute malicious javascript.