Vulnerability GO-2023-1471
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 years ago
August 20, 2024 at 08:25 PM UTC
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
v1.0.0 - v1.2.1
v1.0.0 - v1.2.1
Summary
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
Details
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
6 hours ago
Gotify: Insufficiently Protected Password Change endpoint
v2.0.0 - v2.9.1 GHSA-3hcj-9m7p-wwm9
v2.0.0 - v2.9.1 GHSA-3hcj-9m7p-wwm9
Unknown
2 years ago
gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
v2.0.0 - v2.2.1 GO-2022-1208
v2.0.0 - v2.2.1 GO-2022-1208
Unknown
2 years ago
gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
v2.0.0 - v2.2.1 GO-2022-1208
v2.0.0 - v2.2.1 GO-2022-1208
Medium Risk
3 years ago
Reflected XSS in Gotify's /docs via import of outdated Swagger UI
v1.0.0 - v1.2.1 GHSA-3244-8mff-w398
v1.0.0 - v1.2.1 GHSA-3244-8mff-w398
Medium Risk
3 years ago
gotify/server vulnerable to Cross-site Scripting in the application image file upload
v1.0.0 - v1.2.1 GHSA-xv6x-456v-24xh
v1.0.0 - v1.2.1 GHSA-xv6x-456v-24xh
Impacted packages
Timeline
Published
2 years ago
August 20, 2024 at 08:25 PM UTC
Fixed (v2.2.3)
3 years ago
January 10, 2023 at 05:41 PM UTC
Last Modified
7 months ago
March 03, 2026 at 04:53 AM UTC