CVE-2023-37658

fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS)

published July 11, 2023

CVSS
—
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img, but without strictly check file suffix at /server/fast.py -> ApiUploadHandler.post causes stored XSS

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.2th percentile
Published
2023-07-11T00:00Z
EPSS history
Timeline
  • 11 JUL 00:00Z
    fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS)
    cvelistv5