https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 04 May 2026 17:34:48 +0000 https://vulnerability.circl.lu/sighting/79c1e3ff-023f-43c1-b921-d86349b763b4/export {"uuid": "79c1e3ff-023f-43c1-b921-d86349b763b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38790", "type": "seen", "source": "https://t.me/cibsecurity/49160", "content": "\u203c CVE-2022-38790 \u203c\n\nWeave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a malicious user to inject a javascript: link in the UI. When clicked by a victim user, the script will execute with the victim's permission. The exposure appears in Weave GitOps Enterprise UI via a GitopsCluster dashboard link. An annotation can be added to a GitopsCluster custom resource.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-01T16:38:00.000000Z"} {"uuid": "79c1e3ff-023f-43c1-b921-d86349b763b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38790", "type": "seen", "source": "https://t.me/cibsecurity/49160", "content": "\u203c CVE-2022-38790 \u203c\n\nWeave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a malicious user to inject a javascript: link in the UI. When clicked by a victim user, the script will execute with the victim's permission. The exposure appears in Weave GitOps Enterprise UI via a GitopsCluster dashboard link. An annotation can be added to a GitopsCluster custom resource.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-01T16:38:00.000000Z"} https://vulnerability.circl.lu/sighting/79c1e3ff-023f-43c1-b921-d86349b763b4/export Thu, 01 Sep 2022 16:38:00 +0000