What the vulnerability does

01Description

The seefl package v0.1.1 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability via a malicious filename rendered in a directory listing.

Key dates

02Disclosure timeline

January 6, 2020 CVE published
August 5, 2024 Record updated