PT-2022-13814 · Causefx · Organizr

Published 2022-04-13 · Updated 2022-07-25 · CVE-2022-1344

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions causefx/organizr versions prior to 2.1.1810

Description The issue is related to stored XSS due to a lack of sanitization in filenames. This allows attackers to execute malicious scripts in the user's browser, potentially leading to session hijacking and sensitive data exposure.

Recommendations For versions prior to 2.1.1810, update to version 2.1.1810 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-1344

Affected Products

Organizr

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1344.json · Exploit
• 🔥 https://huntr.dev/bounties/35f66966-af13-4f07-9734-0c50fdfc3a8c · Exploit
• https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-1344 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1344 · Vendor Advisory