PT-2023-10166 · Unknown · Dart Http Server
CVE-2014-125098
·
Publicado
2023-04-10
·
Atualizado
2024-05-17
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Dart http server versions up to 0.9.5
Description
A issue was found in the Directory Listing Handler component, specifically in the
VirtualDirectory function of the lib/src/virtual directory.dart file. The manipulation of the request.uri.path argument leads to cross-site scripting. This issue can be exploited remotely.Recommendations
For Dart http server versions up to 0.9.5, upgrade to version 0.9.6 to address this issue.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dart Http Server