Lucene search
K

4 matches found

OSV
OSV
added 2020/04/01 4:36 p.m.12 views

GHSA-4G46-5GRC-WQ49 Cross-Site Scripting in seeftl

All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider using a...

6.1CVSS6.1AI score0.0013EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2020/04/01 4:36 p.m.86 views

Cross-Site Scripting in seeftl

All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider using a...

6.1CVSS5AI score0.0013EPSS
Exploits1References4Affected Software1
Node.js
Node.js
added 2020/01/10 8:25 p.m.13 views

Cross-Site Scripting

Overview All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Conside...

6.7AI score
Exploits0Affected Software1
Veracode
Veracode
added 2020/01/02 12:8 a.m.15 views

Cross-site Scripting (XSS)

seeftl is vulnerable to cross-site scripting XSS. During the directories listing, the input filename is not escaped before printing the user input directly on the screen, allowing an attacker to inject arbitrary script...

6.1CVSS2.6AI score0.0013EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder