En resumen
- CVE-2022-39220 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a github.com/drakkan/sftpgo, github.com/drakkan/sftpgo/v2, sftpgo (sftpgo project).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.64%, mayor que el 50.5% de las vulnerabilidades.
- Solución: actualizar a 2.3.5 o posterior.
Description
Impact
Cross-site scripting (XSS) vulnerabilities have been reported to affect SFTPGo WebClient. If exploited, this vulnerability allows remote attackers to inject malicious code.
Patches
Fixed in v2.3.5.
NVD description
SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting (XSS) vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds exist.
Más vulnerabilidades de github.com/drakkan/sftpgo
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free