Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/08/18 12:30 a.m.12 views

ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/apps.js

A cross-site scripting XSS issue exists in ExpressGateway ≤ 1.16.10 in lib/rest/routes/apps.js. User-controlled data returned by the REST endpoint is not sanitized before being rendered by the admin/UI layer, allowing an authenticated, low-privileged actor to store or reflect a payload that...

5.1CVSS4.3AI score0.00295EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder