Lucene search
+L

1 matches found

OSV
OSV
added 2023/08/14 7:53 p.m.42 views

CVE-2023-40024 Reflected Cross-Site Scripting (XSS) in scancode.io license endpoint

ScanCode.io is a server to script and automate software composition analysis pipelines. In the /license/ endpoint, the detailed view key is not properly validated and sanitized, which can result in a potential cross-site scripting XSS vulnerability when attempting to access a detailed license vie...

5.4CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder