Skip to content
OpenAdvisories
Unscored CVE-2020-23041 EUVD-2020-15797GHSA-6c8m-46xr-g4qv

Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the …

Published Oct 22, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request.

References