tocsin

Debian/shaarli: medium 5.4

Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with `"` prematurely ends the `<input>` tag on the start page and allows an attacker to add

Action: Upgrade shaarli to 0.12.1+dfsg-8+deb12u2 or later.

Affected

introducedfixedlast affected
00.12.1+dfsg-8+deb12u2-

Fixed versions

0.12.1+dfsg-8+deb12u2

Sources

published · modified · JSON