Answer vulnerable to Stored Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-1535 · ADVISORY
• answerdev/answer commit c3743ba · WEB
• answerdev/answer · PACKAGE
• huntr.dev/bounties/4d4b0caa-6d8c-4574-ae7e-e9ef5e2e1a40 · WEB
• GitHub Advisory GHSA-83qr-c7m9-wmgw · ADVISORY

Lỗ hổng khác của github.com/answerdev/answer

• CVE-2023-4815CAO 8.8Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.
• CVE-2023-4127TRUNG BÌNH 5.9Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.
• CVE-2023-4126CAO 8.8Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.
• CVE-2023-4125CAO 8.8Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.
• CVE-2023-4124TRUNG BÌNH 6.5Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.