~ / search / GHSA-vpmw-77vm-4mjg

GHSA-vpmw-77vm-4mjg

Cross-site Scripting in Cipi

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-26332

Packages

EcosystemPackageAffectedFixed in
Packagist andreapollastri/cipi <= 3.1.15 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cipi 3.1.15 allows Add Server stored cross-site scripting via the /api/servers name field.

References

External links from the advisory. They lead to third-party sites.