medium5.4
CVE-2019-5458
Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaS…
Impact
Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Http-File-Server Project | Http-File-Server | Versions 0.1.0, 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.2.4 |