mojo42/Jirafeau

Releases18

Frequency6 months 3 weeks

Last Release almost 4 years ago

Stars274

Jirafeau: a simple way to upload a file

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-30110 ↗	May 17, 2022Tuesday, 17 May 2022, 14:15	6.1 MEDIUM	4.3 MEDIUM
The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users' browser.