CVE-2026-22257
Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names
Summary
Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names
Original description
The description as published by the source.
Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can upload a file. This issue has been patched in version 0.88.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com