~ / search / GHSA-w3jx-wv97-67ph

GHSA-w3jx-wv97-67ph

Cross-site scripting in Dutchcoders transfer.sh

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-33496

Packages

EcosystemPackageAffectedFixed in
Go github.com/dutchcoders/transfer.sh < 1.2.4 1.2.4

Details

As written in the advisory (Markdown source, shown as plain text).

Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.

References

External links from the advisory. They lead to third-party sites.