MEDIUM
jsy-1 short-url admin.php cross site scripting
Published May 26, 2024
5.3
MEDIUMCVSS 4.0
EPSS 0.34%
Description
A vulnerability classified as problematic has been found in jsy-1 short-url 1.0.0. Affected is an unknown function of the file admin.php. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.0 is able to address this issue. The name of the patch is 35c790897d6979392bc6f60707fc32da13a98b63. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-266292.
Affected products
-
- Version 1.0.0StatusaffectedConstraints-
- Version
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://gitee.com/jsy-1/short-url/commit/35c790897d6979392bc6f60707fc32da13a98b63 patch
- https://gitee.com/jsy-1/short-url/issues/I8UP2A issue-tracking
- https://gitee.com/jsy-1/short-url/releases/tag/v2.0.0 patch
- https://vuldb.com/?ctiid.266292 signaturepermissions-required
- https://vuldb.com/?id.266292 vdb-entrytechnical-description
| Link | Providers | Tags |
|---|---|---|
| https://gitee.com/jsy-1/short-url/commit/35c790897d6979392bc6f60707fc32da13a98b63 | patch | |
| https://gitee.com/jsy-1/short-url/issues/I8UP2A | issue-tracking | |
| https://gitee.com/jsy-1/short-url/releases/tag/v2.0.0 | patch | |
| https://vuldb.com/?ctiid.266292 | signaturepermissions-required | |
| https://vuldb.com/?id.266292 | vdb-entrytechnical-description |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published May 26, 2024
Updated Aug 1, 2024
Reserved May 25, 2024
Link CVE-2024-5380
CISA Vulnrichment
Updated May 28, 2024