Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/18 12:30 a.m.12 views

GHSA-XFP8-X3J6-H67V ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/apps.js

A cross-site scripting XSS issue exists in ExpressGateway ≤ 1.16.10 in lib/rest/routes/apps.js. User-controlled data returned by the REST endpoint is not sanitized before being rendered by the admin/UI layer, allowing an authenticated, low-privileged actor to store or reflect a payload that...

5.1CVSS4.3AI score0.00295EPSS
SaveExploits0References7
Rows per page
Query Builder