Disclosure Date 2021/08/31
CVE-2021-32409
Stored Cross-site Scripting in Kallithea
Kallithea における Stored XSS (蓄積型クロスサイトスクリプティング)
Credit
stypr (@stereotype32)
Affected-Versions
Kallithea: v0.6.2 and earlier
CWE
- CWE-79
Description
Cross Site Scripting (XSS) in Kallithea v0.4.0 up to v0.6.2 and fixed in v0.6.3, when displaying repository group descriptions.
