Jayson Grace

Researcher fromMeta's Purple Team
#14425of 53,632
18.6Total CVSS
Vulnerabilities · 3
Medium
3
PT-2022-25415
6.1
2022-10-17
Mitre · Mitre Caldera · CVE-2022-40605
**Name of the Vulnerable Software and Affected Versions** MITRE CALDERA versions prior to 4.1.0 **Description** The issue allows for XSS in the Operations tab and/or Debrief plugin via a crafted operation name. **Recommendations** For versions prior to 4.1.0, update to version 4.1.0 or later to resolve the issue.
PT-2022-25416
6.1
2022-10-17
Mitre · Mitre Caldera · CVE-2022-40606
**Name of the Vulnerable Software and Affected Versions** MITRE CALDERA versions prior to 4.1.0 **Description** The issue allows for XSS in the Operations tab and/or Debrief plugin via a crafted operation name. **Recommendations** For versions prior to 4.1.0, update to version 4.1.0 or later to resolve the issue.
PT-2018-1792
6.4
2018-11-13
Microsoft · Azure App Service · CVE-2018-8600
**Name of the Vulnerable Software and Affected Versions** Azure App Services (affected versions not specified) **Description** A Cross-site Scripting (XSS) issue exists due to improper sanitization of user-provided input. This allows a remote attacker to inject arbitrary code into a user's web page. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.