Reflected XSS Vulnerability in dpaste

Impact A security vulnerability has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially leading to unauthorized...

PT-2023-31144 · Dpaste · Dpaste

Name of the Vulnerable Software and Affected Versions: dpaste versions prior to v3.8 Description: A security issue has been identified in the expires parameter of the dpaste API, allowing for a POST Reflected XSS attack. This can be exploited by an attacker to execute arbitrary JavaScript code in...