CVE-2022-41139

Published October 17th, 2022

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.

metaredteam/external-disclosures

Disclosures of third party vulnerabilities found by Meta

GitHub