Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names
Résumé
Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can upload a file. This issue has been patched in version 0.88.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com