CVE-2019-12047
Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec and the "<img src…
Published: 2019-05-13 · CVSS: Unscored
Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec and the "<img src=# onerror='eval(new Buffer(" substring.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7