Aller au contenu
Se connecter
6.1 Moyenne

CVE-2023-26146 All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name…

Description

All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without proper sanitization when it is rendered.

Produits et versions touchés

Produit Versions touchées Corrigé en
ithewei/libhv Versions non publiées
ithewei\/libhv Versions non publiées

Autres CVE de ithewei/libhv

Les 3 CVE de ithewei/libhv →
CVE-2023-26147 All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to… 5.3 Moyenne CVE-2023-26148 All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set… 5.4 Moyenne
Suivre cette CVE