Lucene search

K
osvGoogleOSV:GHSA-26Q7-G57V-MXCP
HistoryNov 07, 2018 - 12:28 a.m.

HTML Injection in shout

2018-11-0700:28:11
Google
osv.dev
5

0.001 Low

EPSS

Percentile

33.0%

Affected versions of shout do not escape the /topic command in messages, and are therefore vulnerable to cross-site scripting.

Recommendation

Update to version 0.50.0 or later.

CPENameOperatorVersion
shoutlt0.50.0
shoutge0.44.0

0.001 Low

EPSS

Percentile

33.0%

Related for OSV:GHSA-26Q7-G57V-MXCP