CVE-2022-40931 - dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS)

MEDIUM

dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS)

Published Sep 29, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.63%

dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS).

Ecosystem	Package	Introduced	Fixed
Go	github.com/dutchcoders/transfer.sh	0	not fixed

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6901		Advisory
https://github.com/advisories/GHSA-pwq7-f7f9-cm2j		Advisory
https://github.com/dutchcoders/transfer.sh/issues/500		x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://github.com/dutchcoders/transfer.sh/pull/501		x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-40931