Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37991
HistoryNov 14, 2022 - 7:12 a.m.

Cross-Site Scripting (XSS)

2022-11-1407:12:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site scripting
wsgidav
directory browsing
javascript
vulnerability

EPSS

0.001

Percentile

26.2%

wsgidav is vulnerable to cross-site scripting. The vulnerability exists in the __init__ function of _dir_browser.py when directory browsing is enabled which allows an attacker to inject and execute malicious JavaScript.

EPSS

0.001

Percentile

26.2%