255 matches found
CVE-2020-13339
An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted...
CVE-2020-13339
An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted...
CVE-2020-13339
An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted...
Code injection
An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted...
CVE-2020-13339
Removed by vendor...
CVE-2020-13339
GitLab CVE-2020-13339 affects all versions before 13.2.10, 13.3.7 and 13.4.2 with an XSS issue in the SVG File Preview. The vulnerability target is GitLab’s SVG preview rendering, and overall impact is limited because only the current user is affected. Connected sources reiterate the same affecte...
CVE-2020-13339
An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted...
PT-2020-13480 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.2.10 GitLab versions prior to 13.3.7 GitLab versions prior to 13.4.2 Description: An issue has been discovered in GitLab, where there is an XSS in SVG File Preview. The overall impact is limited, as only the curren...
CVE-2020-13339: Improper Neutralization of Input During Web Page Generation
An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted...
CVE-2016-11063
An issue was discovered in Mattermost Server before 3.5.1. XSS can occur via file preview...
CVE-2016-11063
An issue was discovered in Mattermost Server before 3.5.1. XSS can occur via file preview...
Design/Logic Flaw
An issue was discovered in Mattermost Server before 3.5.1. XSS can occur via file preview...
CVE-2016-11063: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Mattermost Server before 3.5.1. XSS can occur via file preview...
CVE-2019-10047
A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file preview features of the application. An authenticated attacker can upload an HTML file containing JavaScript code and afterwards a file preview URL can be use...
Cross site scripting
A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file preview features of the application. An authenticated attacker can upload an HTML file containing JavaScript code and afterwards a file preview URL can be use...
CVE-2019-10047
CVE-2019-10047 is a stored XSS vulnerability in Pydio Core ≤ 8.2.2, exploitable via the file upload and file preview features of the web application. An authenticated attacker can upload an HTML file containing JavaScript and a subsequent file-preview URL can render that file, causing the script ...
CVE-2019-10047
A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file preview features of the application. An authenticated attacker can upload an HTML file containing JavaScript code and afterwards a file preview URL can be use...
CVE-2019-10047: Improper Neutralization of Input During Web Page Generation
A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file preview features of the application. An authenticated attacker can upload an HTML file containing JavaScript code and afterwards a file preview URL can be use...
Keybase: XSS on Desktop Client
Steps to reproduce 1. Create a file named as 'alert1v.SS'.mp4 in the keybase public/private folder. 2. On the desktop client open the file as a preview. 3. An alert box pops up. gif poc: F399836 The Problem The client/shared/fs/filepreview/av-view.desktop.js file contains a template literal with...