VULNERABILITY INTELLIGENCE

CVE-2022-25224

CVSS score5.4 MEDIUM

EPSS probability0.63%

CISA KEVNot currently listed

Published2022-05-20

Last modified2026-06-17

Description

Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens the site in the current frame allowing an attacker to host JavaScript code in the malicious link in order to trigger an XSS attack. The 'nodeIntegration' configu... .