Mist code injection vulnerability

Mist is the official command line interface to the makedeb package repository, a makedeb open source. A code injection vulnerability exists in Mist Community Edition 4.7.1 and earlier versions, which originates from a cross-site scripting attack in the parameter returnto in the file...