Описание
Cross-Site Scripting (XSS) in cloudcmd
Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting (XSS) when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable.
Recommendation
Update to version 9.1.6 or later.
Пакеты
Наименование
cloudcmd
npm
Затронутые версииВерсия исправления
< 9.1.6
9.1.6
Дефекты
CWE-79
Дефекты
CWE-79