CVE-2022-23051: Petereport Project Petereport

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.

Affected products

• Petereport Project Petereport: version 0.5 only

Published 2022-03-03. Last modified 2026-06-17.