Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-14840
4.3
MEDIUMCVSS v2
Published
August 2, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).
GitHub