CVE-2018-10268

2018-04-2201:29:01

Google

osv.dev

0.001 Low

EPSS

Percentile

23.8%

JSON

An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php avatar parameter.

CPENameOperatorVersion
fastadmineq1.0.0.20180314_beta
fastadmineq1.0.0.20180327_beta
fastadmineq1.0.0.20180401_beta
fastadmineq1.0.0.20180406_beta
fastadmineq1.0.0.20180310_beta
fastadmineq1.0.0.20170915_beta
fastadmineq1.0.0.20171206_beta
fastadmineq1.0.0.20180204_beta
fastadmineq1.0.0.20180117_beta
fastadmineq1.0.0.20180222_beta

Name	Operator	Version
fastadmin	eq	1.0.0.20180314_beta
fastadmin	eq	1.0.0.20180327_beta
fastadmin	eq	1.0.0.20180401_beta
fastadmin	eq	1.0.0.20180406_beta
fastadmin	eq	1.0.0.20180310_beta
fastadmin	eq	1.0.0.20170915_beta
fastadmin	eq	1.0.0.20171206_beta
fastadmin	eq	1.0.0.20180204_beta
fastadmin	eq	1.0.0.20180117_beta
fastadmin	eq	1.0.0.20180222_beta

Rows per page:

1-10 of 171

References

gitee.com/karson/fastadmin/issues/IJ7YZ

0.001 Low

EPSS

Percentile

23.8%

JSON

Related for OSV:CVE-2018-10268