CVE-2018-16480
CVE-2018-16480
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
01 Feb 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of sanitization of the file/folder names before rendering.
Affected products
HackerOne · publicWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →