CVE-2018-3771

2018-07-2000:00:00

CWE-79

hackerone

www.cve.org

0.001 Low

EPSS

Percentile

38.0%

JSON

An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.

CNA Affected

[
  {
    "product": "statics-server",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "0.0.9"
      }
    ]
  }
]

References

hackerone.com/reports/355458

0.001 Low

EPSS

Percentile

38.0%

JSON

Related for CVELIST:CVE-2018-3771