← Back to CVE List

CVE-2022-2514

Published: 2022-07-25T14:15Z
Last Modified: 2024-11-21T07:01Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt