| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/drakkan/sftpgo | < 2.3.5all versions | 2.3.5 |
| github.com/drakkan/sftpgo/v2 | < 2.3.5 | 2.3.5 |
| sftpgo | < 2.3.5 | 2.3.5 |
Cross-site scripting (XSS) vulnerabilities have been reported to affect SFTPGo WebClient. If exploited, this vulnerability allows remote attackers to inject malicious code.
Fixed in v2.3.5.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free