Description (CNA)
Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| polonel / polonel/trudesk | affected unspecified before v1.2.0 |
CWE
CWE-434
References
- https://huntr.dev/bounties/b0c4f992-4ac8-4479-82f4-367ed1a2a826
- https://github.com/polonel/trudesk/commit/c4b262c2613d4a8865de0b3252112544bd81997a
ADP enrichment
No English description supplied.