| Package | Affected versions | Patched versions |
|---|---|---|
| liquidfiles | < 3.3.19 | 3.3.19 |
An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering of HTML files uploaded to the platform as attachments, when the -htmlview URL is directly accessed. The impact ranges from executing commands as root on the server to retrieving sensitive information about encrypted e-mails, depending on the permissions of the target user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free