Go/github.com/gotify/server/v2: unknown
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
Action: Upgrade github.com/gotify/server/v2 to 2.2.3 or later.
go get github.com/gotify/server/v2@v2.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.3 | - |
Fixed versions
| 2.2.3 |
Sources
- osv: GO-2023-1471#Go/github.com/gotify/server/v2
- https://github.com/gotify/server/security/advisories/GHSA-3244-8mff-w398
- https://github.com/gotify/server/pull/541
- https://research.securitum.com/mutation-xss-via-mathml-mutation-dompurify-2-0-17-bypass
- https://www.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers
published · modified · JSON