Описание
WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dir_browser.enable = False in the configuration.
Ссылки
- PatchThird Party Advisory
- MitigationThird Party Advisory
- PatchThird Party Advisory
- MitigationThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 3.0.0 (включая) до 4.1.0 (исключая)
cpe:2.3:a:wsgidav_project:wsgidav:*:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.001
Низкий
8.2 High
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79
CWE-79
Связанные уязвимости
CVSS3: 8.2
github
почти 3 года назад
Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled
EPSS
Процентиль: 28%
0.001
Низкий
8.2 High
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79
CWE-79