Описание
copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. This is fixed in version 1.18.5.
Уязвимые конфигурации
Конфигурация 1Версия до 1.18.5 (исключая)
cpe:2.3:a:9001:copyparty:*:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00059
Низкий
5.4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
6 месяцев назад
copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata
EPSS
Процентиль: 18%
0.00059
Низкий
5.4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79