Lucene search

K
osvGoogleOSV:GHSA-HQ75-GGC3-8H3Q
HistoryMay 24, 2022 - 4:50 p.m.

AntSword RCE and XSS via code injection

2022-05-2416:50:44
Google
osv.dev
7

0.002 Low

EPSS

Percentile

53.2%

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.

CPENameOperatorVersion
antswordlt2.1.0

0.002 Low

EPSS

Percentile

53.2%

Related for OSV:GHSA-HQ75-GGC3-8H3Q