CVE-2021-33497

CVE-2021-33497 affects Dutchcoders transfer.sh up to version 1.2.3, where a directory-traversal vulnerability in file handling allows deletion of arbitrary files. The issue stems from unvalidated/un-sanitized input and leads to potential unauthorized file removal. A fixed release, transfer.sh 1.2...

CVE-2021-33496

This CVE affects Dutchcoders transfer.sh prior to version 1.2.4. The vulnerability is an XSS in an inline view, caused by insufficient sanitization of URLs in that view. Impact is user-initialized script execution via the compromised inline view, with the issue occurring before 1.2.4. The vendor ...