Cross-site scripting in Dutchcoders transfer.sh

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-33496 · ADVISORY
• dutchcoders/transfer.sh#373 · WEB
• dutchcoders/transfer.sh commit 9df18fd · WEB
• dutchcoders/transfer.sh release v1.2.4 · WEB
• vuln.ryotak.me/advisories/43 · WEB
• GitHub Advisory GHSA-w3jx-wv97-67ph · ADVISORY

github.com/dutchcoders/transfer.sh のその他の脆弱性

• CVE-2022-40931中 6.1dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS).
• CVE-2021-33497緊急 9.1Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files.