Vendor
ArchiveBox
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.4
ArchiveBox: Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context
ArchiveBox is an open source self-hosted web archiving system. Any users who are using the `wget` extractor and view the content it outputs. The impact is potentially severe if you are logged in to the ArchiveBox admin site in the same browser session and vie…