GHSA-gmxv-xf2q-6j8mMediumCVSS 5.4

Cross-Site Scripting in m-server

Published
February 7, 2019
Last Modified
September 13, 2023

🔗 CVE IDs covered (1)

CVE-2018-16484 →

📋 Description

Versions of m-server before 1.4.2 are vulnerable to stored cross-site scripting. This vulnerability is exploitable if an attacker is able to control the name of a file that m-server is serving.

Recommendation

Update to version 1.4.2 or later.

🎯 Affected products1

  • npm/m-server:< 1.4.2

🔗 References (5)