A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code that is executed when a user follows the crafted share link.
References
Link | Resource |
---|---|
https://filerun.com/changelog | Release Notes |
https://herolab.usd.de/security-advisories/usd-2022-0009/ | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-12-06T00:00:00
Updated: 2023-12-06T01:04:39.637102
Reserved: 2023-03-27T00:00:00
Link: CVE-2023-28875
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-12-06T01:15:07.190
Modified: 2023-12-11T19:48:00.830
Link: CVE-2023-28875
JSON object: View
Redhat Information
No data.
CWE