Lucene search
+L

1 matches found

RubySec
RubySec
added 2024/02/20 12:0 a.m.36 views

Cross-site scripting (XSS) in the dynamic file uploads

Impact The dynamic file upload feature is subject to potential XSS attach in case the attacker manages to modify the file names of the records being uploaded to the server. This appears in sections where the user controls the file upload dialogs themselves and has the technical knowledge to chang...

6.3CVSS6AI score0.00493EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder