CVE-2022-41905 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

PT-2022-26136 · Wsgidav · Wsgidav

Name of the Vulnerable Software and Affected Versions: WsgiDAV versions prior to 4.1.0 Description: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue occurs when untrusted data is displayed in the directory...

CVE-2022-41905 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

py-WsgiDAV -- XSS vulnerability

Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks...

WsgiDAV 跨站脚本漏洞

WsgiDAV is a WSGI-based general-purpose extensible WebDAV server from Martin Wendt, a personal developer. A security vulnerability exists in WsgiDAV that stems from vulnerability to cross-site scripting XSS attacks...

CVE-2022-41905

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set "dirbrowser.enable =...

CVE-2022-41905: Improper Neutralization of Input During Web Page Generation

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

CVE-2022-41905

WsgiDAV (WebDAV server) is affected by CVE-2022-41905 when directory browsing is enabled. The vulnerability enables Cross-Site Scripting (XSS) in scenarios where untrusted data is displayed in the directory browser UI. The issue has been patched; upgrading to WsgiDAV 4.1.0 is recommended. As a wo...