Lucene search
K

44 matches found

OSV
OSV
added 2026/02/20 11:51 p.m.6 views

CVE-2026-27169 OpenSift: Persistent XSS Chat Tool Rendering

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored content can execute JavaScript when...

8.9CVSS5.8AI score0.00347EPSS
Exploits0References4
CVE
CVE
added 2026/02/20 11:51 p.m.14 views

CVE-2026-27169

OpenSift OpenSift: Persistent XSS in chat rendering (versions ≤ 1.1.2-alpha) due to unsafe HTML interpolation. Stored content can execute JavaScript in an authenticated session, enabling actions as the victim within the local app. Affected component: chat tool UI surfaces; root cause: unsafe HTML...

8.9CVSS5.8AI score0.00347EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/20 11:51 p.m.5 views

CVE-2026-27169 OpenSift: Persistent XSS Chat Tool Rendering

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored content can execute JavaScript when...

8.9CVSS5.7AI score0.00347EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.7 views

PT-2026-21329

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored content can execute JavaScript when...

8.9CVSS5.8AI score0.00347EPSS
Exploits0References3
Rows per page
Query Builder