Path Traversal in Dutchcoders transfer.sh

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-33497 · ADVISORY
• dutchcoders/transfer.sh#373 · WEB
• dutchcoders/transfer.sh release v1.2.4 · WEB
• vuln.ryotak.me/advisories/44 · WEB
• GitHub Advisory GHSA-cf55-rq8x-hm6f · ADVISORY

github.com/dutchcoders/transfer.sh のその他の脆弱性

• CVE-2022-40931中 6.1dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS).
• CVE-2021-33496中 6.1Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.