CVE-2023-26146

creationtimestamp| type| source ---|---|--- 2023-09-29 12:42:31+00:00| seen| https://t.me/cibsecurity/71271...

CVE-2023-26146

CVE-2023-26146 affects the library ithewei/libhv (all versions per PT-2023-20524) with a Cross-site Scripting (XSS) flaw that occurs when a file name containing a malicious payload is served and rendered without proper sanitization. The underlying issue is insufficient sanitization of filenames, ...

CVE-2023-26146

All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting XSS such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without proper sanitization when it is rendered...