CVE-2023-31779
Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com