CVE-2021-32409

Kallithea における Stored XSS (蓄積型クロスサイトスクリプティング)

Cross Site Scripting (XSS) in Kallithea v0.4.0 up to v0.6.2 and fixed in v0.6.3, when displaying repository group descriptions.

Disclosure Date

2021/09/01

Credit

stypr (@stereotype32)

CWE

• CWE-79

Product URLs

• https://kallithea-scm.org/

Reference

• https://kallithea-scm.org/security/20201201-stypr-1.html
• https://kallithea-scm.org/repos/kallithea/changeset/cd8fa11c5c89278a103b795db50e740594038ec8