SFTPGo WebClient vulnerable to Cross-site Scripting

Mô tả

Tham khảo

• drakkan/sftpgo security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-39220 · ADVISORY
• drakkan/sftpgo commit cbef217 · WEB
• drakkan/sftpgo · PACKAGE

Lỗ hổng khác của github.com/drakkan/sftpgo

• CVE-2026-77375TRUNG BÌNH 6.5SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol messa…
• CVE-2026-103028TRUNG BÌNH 4.3SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a…
• CVE-2026-49245THẤP 3.7SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the inline query parameter on browsable-share file do…
• CVE-2026-49244TRUNG BÌNH 5.9SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the public web-client partial ZIP download endpoint f…
• CVE-2026-30915TRUNG BÌNH 4.3SFTPGo is an open source, event-driven file transfer solution. SFTPGo versions before v2.7.1 contain an input validation issue in the handli…