dam_open_source vulnerabilities

CVEs whose affected-version data names the dam_open_source package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2018-25157Medium· 6.4PoC

7mo ago

Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through crafted file names during document uploads

Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through crafted file names during document uploads. Attackers can upload files with embedded SVG scripts th…

▾ TwilightPhraseanet · Phraseanet DAM Open SourceEPSS 0.27%via NVD