CVE-2024-43799 — send vulnerable to template injection that can lead to XSS
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issu…
Published: 2024-09-10 · CVSS: 5.0 · CVSS 3.1
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7