GitHub Advisoryadvisory · Go

GHSA-wmfc-g86p-fjvr go package pydio cells vulnerable to cross-site scripting

MEDIUM Published 2023-05-30 Modified 2023-11-15 Official page ↗
Aliases
CVE-2023-2981
Ecosystem
Go
Packages
github.com/pydio/cells
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-80
Reviewed
2023-05-31

Affected packages

• Go github.com/pydio/cells: < 4.2.1 → fixed in 4.2.1

Description

A vulnerability, which was classified as problematic, has been found in Abstrium Pydio Cells 4.2.0. This issue affects some unknown processing of the component Chat. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. Upgrading to version 4.2.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-230213 was assigned to this vulnerability.

Related

Alias · CVE (1)

  • CVE-2023-2981 A vulnerability, which was classified as problematic, has been found in Abstrium Pydio Cells 4.2.0. vulnerability

Weakness · CWE (1)

  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References