VDB
Sign up
MEDIUM5.4

GHSA-vpmw-77vm-4mjg

Cross-site Scripting in Cipi

Details

Cipi 3.1.15 allows Add Server stored cross-site scripting via the /api/servers name field.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/andreapollastri/cipi
Introduced in: 0

No fixed version published yet for andreapollastri/cipi (composer). Pin to a known-safe version or switch to an alternative.

References