simonmichael/hledger

simonmichael/hledger

GitHubGitHub
GitHubgithub.com
hledger.orghledger.org
Releases607
Frequency1 week 3 days
Last Release
Stars4.59K
Robust, fast, intuitive plain text accounting tool with CLI, TUI and web interfaces.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2021-46888NVD↗
< 1.235.4 MEDIUM—

An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting (XSS) vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function.