Packagist/getkirby/kirby CVE-2018-16630: medium 4.8, EPSS 0.56%
Kirby XSS Vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.5.12 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3gq5-r59m-mmv2
- https://nvd.nist.gov/vuln/detail/CVE-2018-16630
- https://github.com/getkirby-v2/kirby
- https://web.archive.org/web/20201208015414/https://github.com/security-breachlock/CVE-2018-16630/blob/master/Kirby_Insecure%20file%20validation.pdf
CVE-2018-16630 · published · modified · JSON