CVE-2024-36115: Reposilite artifacts vulnerable to Stored Cross-site Scripting
(updated )
Reposilite v3.5.10 is affected by Stored Cross-Site Scripting (XSS) when displaying artifact’s content in the browser.
References
- github.com/advisories/GHSA-9w8w-34vr-65j2
- github.com/dzikoysk/reposilite
- github.com/dzikoysk/reposilite/commit/279a472015ec675c1da449d902dc82e4dd578484
- github.com/dzikoysk/reposilite/commit/d11609f427aba255e0f6f54b1105d5d20ab043cf
- github.com/dzikoysk/reposilite/releases/tag/3.5.12
- github.com/dzikoysk/reposilite/security/advisories/GHSA-9w8w-34vr-65j2
- nvd.nist.gov/vuln/detail/CVE-2024-36115
Code Behaviors & Features
Detect and mitigate CVE-2024-36115 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →