Skip to content
OpenAdvisories

Vendor

imputnet

1 known vulnerabilities.

Products

cobalt 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2024-51498

    [@imput/cobalt-web] Cross-site Scripting when downloading picker image from malicious instance

    cobalt is a media downloader that doesn't piss you off. A malicious cobalt instance could serve links with the `javascript:` protocol, resulting in Cross-site Scripting (XSS) when the user tries to download an item from a picker. This issue has been present s…

    imputnet cobalt