Description (CNA)
All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without proper sanitization when it is rendered.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / ithewei/libhv | affected 0 before * |
CWE
CWE-79
References
- https://security.snyk.io/vuln/SNYK-UNMANAGED-ITHEWEILIBHV-5730766
- https://gist.github.com/dellalibera/c53448135480cbe12257c4b413a90d20
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.