CVE-2022-46181

Go/github.com/gotify/server CVE-2022-46181: medium 4.6, EPSS 0.53%

gotify/server vulnerable to Cross-site Scripting in the application image file upload

Action: Upgrade github.com/gotify/server to 2.2.2 or later.

go get github.com/gotify/server@v2.2.2

Affected

Fixed versions

Sources

• osv: GHSA-xv6x-456v-24xh
• https://github.com/gotify/server/security/advisories/GHSA-xv6x-456v-24xh
• https://nvd.nist.gov/vuln/detail/CVE-2022-46181
• https://github.com/gotify/server/pull/534
• https://github.com/gotify/server/pull/535
• https://github.com/gotify/server

CVE-2022-46181 · published 2022-12-30T00:58:09Z · modified 2024-08-21T16:28:38.862938Z · JSON

Go/github.com/gotify/server CVE-2022-46181: unknown, EPSS 0.53%

gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2022-1208
• https://github.com/gotify/server/security/advisories/GHSA-xv6x-456v-24xh
• https://nvd.nist.gov/vuln/detail/CVE-2022-46181
• https://github.com/gotify/server/pull/534
• https://github.com/gotify/server/pull/535

CVE-2022-46181 · published 2024-08-21T16:03:59Z · modified 2026-03-03T04:52:56.868724Z · JSON

Go/github.com/gotify/server/v2 CVE-2022-46181: unknown, EPSS 0.53%

gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

Action: Upgrade github.com/gotify/server/v2 to 2.2.2 or later.

go get github.com/gotify/server/v2@v2.2.2

Affected

Fixed versions

Sources

• osv: GO-2022-1208#Go/github.com/gotify/server/v2
• https://github.com/gotify/server/security/advisories/GHSA-xv6x-456v-24xh
• https://nvd.nist.gov/vuln/detail/CVE-2022-46181
• https://github.com/gotify/server/pull/534
• https://github.com/gotify/server/pull/535

CVE-2022-46181 · published 2024-08-21T16:03:59Z · modified 2026-03-03T04:52:56.868724Z · JSON