Lucene search

K
osvGoogleOSV:GHSA-VMP5-C5HP-6C65
HistoryApr 30, 2022 - 12:00 a.m.

Woodpecker allows cross-site scripting (XSS) via build logs

2022-04-3000:00:33
Google
osv.dev
4

0.001 Low

EPSS

Percentile

26.4%

Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.

0.001 Low

EPSS

Percentile

26.4%

Related for OSV:GHSA-VMP5-C5HP-6C65