CVE-2024-27731
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web leo.oliver.nz