Lucene search

K
osvGoogleOSV:GHSA-GMXV-XF2Q-6J8M
HistoryFeb 07, 2019 - 6:16 p.m.

Cross-Site Scripting in m-server

2019-02-0718:16:16
Google
osv.dev
6

0.001 Low

EPSS

Percentile

24.8%

Versions of m-server before 1.4.2 are vulnerable to stored cross-site scripting. This vulnerability is exploitable if an attacker is able to control the name of a file that m-server is serving.

Recommendation

Update to version 1.4.2 or later.

CPENameOperatorVersion
m-serverlt1.4.2

0.001 Low

EPSS

Percentile

24.8%

Related for OSV:GHSA-GMXV-XF2Q-6J8M