Go/github.com/cloudreve/Cloudreve/v3 CVE-2022-32167: medium 5.4, EPSS 0.56%

Cross site scripting in Cloudreve

Action: Upgrade github.com/cloudreve/Cloudreve/v3 to 3.6.0-beta1 or later.

go get github.com/cloudreve/Cloudreve/v3@v3.6.0-beta1

Affected

Fixed versions

Sources

• osv: GHSA-fg25-gq9g-32mx#Go/github.com/cloudreve/Cloudreve/v3
• https://nvd.nist.gov/vuln/detail/CVE-2022-32167
• https://github.com/cloudreve/Cloudreve/commit/4b85541d73949969f41ad46d1e00544c9f1a7538
• https://github.com/cloudreve/Cloudreve
• https://github.com/cloudreve/Cloudreve/releases/tag/3.6.0-beta1
• https://www.mend.io/vulnerability-database/CVE-2022-32167

CVE-2022-32167 · published 2022-09-21T00:00:44Z · modified 2023-11-08T04:09:34.658354Z · JSON