Lookyloo is vulnerable due to improper user input sanitization
Résumé
Lookyloo is vulnerable due to improper user input sanitization
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.35.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web vulnerability.circl.lu