CVE-2022-39220 in SFTPGoinformação

Sumário

de MITRE • 21/09/2022

SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting (XSS) vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds exist.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

GitHub, Inc.

Reservar

02/09/2022

Divulgação

21/09/2022

Moderação

aceite

Entrada

VDB-209211

CPE

pronto

EPSS

0.00560

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-39220
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-39220
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-39220/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!