CVE-2024-43799
send vulnerable to template injection that can lead to XSS
Résumé
send vulnerable to template injection that can lead to XSS
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-43799 node-send Corrigé dans: 0.17.1-2+deb11u1
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web lists.debian.org