tocsin

CVE-2022-23466

1 advisory.

Go/teler.app CVE-2022-23466: low 3.1, EPSS 0.42%

teler dashboard vulnerable to DOM-based cross-site scripting (XSS)

Action: Upgrade teler.app to 0.0.0-20221203202318-20f59eda2420 or later.

go get teler.app@v2.0.0-rc.4
go get teler.app@v2.0.0-dev.2
go get teler.app@v0.0.0-20221203202318-20f59eda2420
go get teler.app@v1.2.3-0.20221203202318-20f59eda2420

Affected

introducedfixedlast affected
2.0.0-rc2.0.0-rc.4-
2.0.0-dev2.0.0-dev.2-
0.0.0-20220625162531-2289e90590a90.0.0-20221203202318-20f59eda2420-
1.2.3-0.20220625162531-2289e90590a91.2.3-0.20221203202318-20f59eda2420-

Fixed versions

2.0.0-rc.42.0.0-dev.20.0.0-20221203202318-20f59eda24201.2.3-0.20221203202318-20f59eda2420

Sources

CVE-2022-23466 · published · modified · JSON