Vulnerabilities

TI-2022-19487 CVE-2022-40931 · GHSA-pwq7-f7f9-cm2j

dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS).

MEDIUM 60

dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0064 Published 2022-09-29 No fix listed CWE-79

TI-2021-12899 CVE-2021-33497 · GHSA-cf55-rq8x-hm6f

MEDIUM 43

Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02035 Published 2021-05-24 Fixed in 1.2.4 CWE-22

TI-2021-12898 CVE-2021-33496 · GHSA-w3jx-wv97-67ph

LOW 29

Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01009 Published 2021-05-24 Fixed in 1.2.4 CWE-79