Cross-site Scripting in Cipi

2022-03-0200:00:21

Google

osv.dev

0.001 Low

EPSS

Percentile

32.3%

JSON

Cipi 3.1.15 allows Add Server stored cross-site scripting via the /api/servers name field.

CPENameOperatorVersion
andreapollastri/cipieq3.1.12
andreapollastri/cipieq2.1.6
andreapollastri/cipieq2.2.8
andreapollastri/cipieq1.1.6
andreapollastri/cipieq1.0.6
andreapollastri/cipieq3.1.0
andreapollastri/cipieq2.4.4
andreapollastri/cipieq2.1.2
andreapollastri/cipieq2.1.4
andreapollastri/cipieq2.4.7

Name	Operator	Version
andreapollastri/cipi	eq	3.1.12
andreapollastri/cipi	eq	2.1.6
andreapollastri/cipi	eq	2.2.8
andreapollastri/cipi	eq	1.1.6
andreapollastri/cipi	eq	1.0.6
andreapollastri/cipi	eq	3.1.0
andreapollastri/cipi	eq	2.4.4
andreapollastri/cipi	eq	2.1.2
andreapollastri/cipi	eq	2.1.4
andreapollastri/cipi	eq	2.4.7