CVE-2023-0357
Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application do...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket.
Références
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com