CVE-2018-3771

An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.

Score

CVSS 3.1 6.1 Medium

Status

Modified - support@hackerone.com

Published

2018-07-20

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Statics-server (Hackerone)
• Statics-server (Statics-server Project)

References

• https://hackerone.com/reports/355458