Description
Copyparty is a portable file server. In versions prior to 1.20.9, an XSS allows for reflected cross-site scripting via URL-parameter `?setck=...`. Version 1.20.9 fixes the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 9001 | copyparty | < 1.20.9 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | copyparty | < 1.20.9 | 1.20.9 | GHSA-62cr-6wp5-q43h |