GHSA-cf7g-cm7q-rq7f
SFTPGo WebClient vulnerable to Cross-site Scripting
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/drakkan/sftpgo | < 2.3.5 | 2.3.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Cross-site scripting (XSS) vulnerabilities have been reported to affect SFTPGo WebClient. If exploited, this vulnerability allows remote attackers to inject malicious code.
### Patches
Fixed in v2.3.5.
References
External links from the advisory. They lead to third-party sites.