CVE-2022-40931
1 advisory.
Go/github.com/dutchcoders/transfer.sh CVE-2022-40931: medium 6.1
Dutchoders transfer.sh contains an XSS vulnerability via malicious file upload
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.4.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pwq7-f7f9-cm2j
- https://nvd.nist.gov/vuln/detail/CVE-2022-40931
- https://github.com/dutchcoders/transfer.sh/issues/500
- https://github.com/dutchcoders/transfer.sh/pull/501
- https://github.com/dutchcoders/transfer.sh
CVE-2022-40931 · published · modified · JSON