CVE-2023-25810
Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma
概要
Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma status page allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov