Skip to content
Sign in
6.1 Medium

CVE-2023-26146 All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name…

Description

All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without proper sanitization when it is rendered.

Affected products and versions

Product Affected versions Fixed in
ithewei/libhv Versions not published
ithewei\/libhv Versions not published

Other CVEs of ithewei/libhv

The 3 CVEs of ithewei/libhv →
CVE-2023-26147 All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to… 5.3 Medium CVE-2023-26148 All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set… 5.4 Medium
Track this CVE