| Package | Affected versions | Patched versions |
|---|---|---|
| mindsdb | ≤ 23.6.3.1 | |
| mindsdb | = 23.6.3.1 |
When a user uploads a csv file that contains an javascript payload a Cross-site Scripting (XSS) is triggered when the file is viewed. This is true for both cloud version and OSS version.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free