medium5.4
CVE-2024-42054
Cervantes through 0.5-alpha accepts insecure file uploads.
Impact
Cervantes through 0.5-alpha accepts insecure file uploads.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cervantessec | Cervantes | Versions 0.3, 0.4, 0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/CervantesSec/cervantes/commit/78631a034d0fb3323a53fb7428b2022b29a0d2cd
- https://www.getastra.com/blog/vulnerability/xss-insecure-file-cervantes/
- https://www.jinsonvarghese.com/stored-xss-file-upload-vulnerabilities-found-in-cervantes/
- https://github.com/CervantesSec/cervantes/commit/78631a034d0fb3323a53fb7428b2022b29a0d2cd
- https://www.getastra.com/blog/vulnerability/xss-insecure-file-cervantes/
- https://www.jinsonvarghese.com/stored-xss-file-upload-vulnerabilities-found-in-cervantes/