Skip to content
OpenAdvisories
High CVE-2019-15603 EUVD-2020-0363GHSA-4g46-5grc-wq49

Cross-Site Scripting in seeftl

Published Jan 6, 2020 · Updated Aug 5, 2024 · Assigned by hackerone

Description

The seefl package v0.1.1 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability via a malicious filename rendered in a directory listing.

Affected products

VendorProductAffectedFixed
— seeftl v0.1.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm seeftl <= 0.1.1 — GHSA-4g46-5grc-wq49

References