Skip to content
OpenAdvisories

Package · Go

github.com/csaf-poc/csaf_distribution

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2022-43996

    csaf-poc/csaf_distribution Cross-site Scripting vulnerability

    The csaf_provider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html. The endpoint upload allows valid CSAF advisories (JSON format) to be uploaded with Content-Type text/html and filenames ending in .html. When subsequently acc…

    github.com/csaf-poc/csaf_distribution Go