Description
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | passbolt/passbolt_api | < 1.6.5 | 1.6.5 | GHSA-j2fp-9wp5-mg66 |
Medium · 5.4
CVE-2017-1000442
EUVD-2022-4256GHSA-j2fp-9wp5-mg66
Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar
Published Jan 2, 2018 · Updated Sep 17, 2024 · Assigned by mitre