Lucene search
Veracode Vulnerability DatabaseVERACODE:22616HistoryMar 02, 2020 - 9:19 a.m.
Cross-site Scripting (XSS)
2020-03-0209:19:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
47.9%
gwtupload-samples is vulnerable to cross-site scripting (XSS). The attack is possible because it allows the attacker to input malicious file names using the upload functionality, leading to an execution of malicious script when the filename is processed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gwtupload examples | le | 1.0.3 | |
| gwtupload examples | le | 1.0.3 |
Related
osv
osv
Cross-site Scripting in GwtUpload
2021-04-22 16:15:33
CVE-2020-9447
2020-02-28 16:15:11
prion
prion
Cross site scripting
2020-02-28 16:15:00
cvelist
cvelist
CVE-2020-9447
2020-02-28 15:07:46
coresecurity
coresecurity
GWTUpload XSS in the File Upload Functionality
2020-03-04 00:00:00
github
github
Cross-site Scripting in GwtUpload
2021-04-22 16:15:33
cve
cve
CVE-2020-9447
2020-02-28 16:15:11
veracode
veracode
Cross-site Scripting (XSS)
2021-04-23 03:41:09
nvd
nvd
CVE-2020-9447
2020-02-28 16:15:11