~ / search / GHSA-68wj-c2jw-5pp9

GHSA-68wj-c2jw-5pp9

Stored cross site scripting in changedetection.io

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-24769

Packages

EcosystemPackageAffectedFixed in
PyPI changedetection.io < 0.40.2 0.40.2

Details

As written in the advisory (Markdown source, shown as plain text).

Changedetection.io before 0.40.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the "Add a new change detection watch" function.

References

External links from the advisory. They lead to third-party sites.