CVE-2023-25810
Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma
Summary
Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma
Original description
The description as published by the source.
Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma status page allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov