Skip to content
OpenAdvisories

Product · smgdkngt

dobase

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4

    Stored DOM-XSS in public shared-folder image gallery (one-click, unauthenticated victim)

    Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored DOM-based cross-site scripting (XSS) vulnerability in the public, unauthenticated shared-folder image gallery. A file's `name` is full…