Skip to content
OpenAdvisories

Vendor

Jirafeau project

3 known vulnerabilities.

Products

Jirafeau 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-1466

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau

    Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME t…

    Jirafeau project Jirafeau
  • Medium 6.1
    CVE-2025-7066

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau

    Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME t…

    Jirafeau project Jirafeau
  • Medium 6.1
    CVE-2024-12326

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau

    Jirafeau normally prevents browser preview for SVG files due to the possibility that manipulated SVG files could be exploited for cross site scripting. This was done by storing the MIME type of a file and preventing the browser preview for MIME type image/svg…

    Jirafeau project Jirafeau