Vulnerability GO-2022-1208
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 years ago
August 21, 2024 at 04:03 PM UTC
gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
v1.0.0 - v1.2.1
v1.0.0 - v1.2.1
Summary
gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
Details
gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
6 hours ago
Gotify: Insufficiently Protected Password Change endpoint
v2.0.0 - v2.9.1 GHSA-3hcj-9m7p-wwm9
v2.0.0 - v2.9.1 GHSA-3hcj-9m7p-wwm9
Unknown
2 years ago
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
v2.0.0 - v2.2.2 GO-2023-1471
v2.0.0 - v2.2.2 GO-2023-1471
Unknown
2 years ago
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
v2.0.0 - v2.2.2 GO-2023-1471
v2.0.0 - v2.2.2 GO-2023-1471
Medium Risk
3 years ago
Reflected XSS in Gotify's /docs via import of outdated Swagger UI
v1.0.0 - v1.2.1 GHSA-3244-8mff-w398
v1.0.0 - v1.2.1 GHSA-3244-8mff-w398
Medium Risk
3 years ago
gotify/server vulnerable to Cross-site Scripting in the application image file upload
v1.0.0 - v1.2.1 GHSA-xv6x-456v-24xh
v1.0.0 - v1.2.1 GHSA-xv6x-456v-24xh
Impacted packages
Timeline
Published
2 years ago
August 21, 2024 at 04:03 PM UTC
Fixed (v2.2.2)
3 years ago
December 29, 2022 at 12:03 PM UTC
Last Modified
7 months ago
March 03, 2026 at 04:52 AM UTC