Lucene search
GoogleOSV:CVE-2023-37658HistoryJul 11, 2023 - 3:15 p.m.
CVE-2023-37658
2023-07-1115:15:20
Google
osv.dev
3
cve-2023-37658
cross site scripting
file upload
binary check
file suffix check
apiuploadhandler.post
fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img, but without strictly check file suffix at /server/fast.py -> ApiUploadHandler.post causes stored XSS
| CPE | Name | Operator | Version |
|---|---|---|---|
| fast-poster | eq | 2.8.0 | |
| fast-poster | eq | 1.3.3 | |
| fast-poster | eq | V1.2.2 | |
| fast-poster | eq | 2.4.1 | |
| fast-poster | eq | 2.7.1 | |
| fast-poster | eq | 2.13.0 | |
| fast-poster | eq | 2.10.0 | |
| fast-poster | eq | 2.9.0 | |
| fast-poster | eq | 2.11.0 | |
| fast-poster | eq | 1.5.4 |
References
Related
prion
prion
Cross site scripting
2023-07-11 15:15:00
cvelist
cvelist
CVE-2023-37658
2023-07-11 00:00:00
nvd
nvd
CVE-2023-37658
2023-07-11 15:15:20
cve
cve
CVE-2023-37658
2023-07-11 15:15:20