CVE-2022-0372

Packagist/bytefury/crater CVE-2022-0372: medium 5.4

Cross-site Scripting in Crater Invoice

Action: Upgrade bytefury/crater to 6.0.0 or later.

composer require bytefury/crater:6.0.0

Affected

Fixed versions

Sources

• osv: GHSA-6vfw-74wr-3chh
• https://nvd.nist.gov/vuln/detail/CVE-2022-0372
• https://github.com/crater-invoice/crater/pull/681
• https://github.com/crater-invoice/crater/commit/cdc913d16cf624aee852bc9163a7c6ffc8d1da9d
• https://github.com/crater-invoice/crater
• https://huntr.dev/bounties/563232b9-5a93-4f4d-8389-ed805b262ef1

CVE-2022-0372 · published 2022-01-28T00:03:42Z · modified 2023-11-08T04:07:33.039748Z · JSON