Go/github.com/gotify/server: unknown
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2023-1471
- https://github.com/gotify/server/security/advisories/GHSA-3244-8mff-w398
- https://github.com/gotify/server/pull/541
- https://research.securitum.com/mutation-xss-via-mathml-mutation-dompurify-2-0-17-bypass
- https://www.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers
published · modified · JSON