Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2026/10/20 9:09 p.m.•3 views

GHSA-X397-5HRV-J9M9 Cachet has Stored XSS in Incident Component

Summary A stored Cross-Site Scripting XSS vulnerability exists in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover...

4.8CVSS5.8AI score0.00355EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/10/20 9:09 p.m.•5 views

Cachet has Stored XSS in Incident Component

Summary A stored Cross-Site Scripting XSS vulnerability exists in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover...

4.8CVSS5.8AI score0.00355EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder