https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:56:12 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-0435 <p>User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads.</p> <p>Given the minimum requirement for a user to send a chat is to be given access to a workspace via an admin the risk is low. Additionally, the location in which the XSS renders is only limited to the user who submits the XSS.</p> <p>Ultimately, this attack is limited to the user attacking themselves. There is no anonymous chat submission unless the user does not take the minimum steps required to protect their instance.</p> <p>User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads.</p> <p>Given the minimum requirement for a user to send a chat is to be given access to a workspace via an admin the risk is low. Additionally, the location in which the XSS renders is only limited to the user who submits the XSS.</p> <p>Ultimately, this attack is limited to the user attacking themselves. There is no anonymous chat submission unless the user does not take the minimum steps required to protect their instance.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-0435 https://vulnerability.circl.lu/vuln/ghsa-m8mq-5vgv-8w3r <p>User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads.</p> <p>Given the minimum requirement for a user to send a chat is to be given access to a workspace via an admin the risk is low. Additionally, the location in which the XSS renders is only limited to the user who submits the XSS.</p> <p>Ultimately, this attack is limited to the user attacking themselves. There is no anonymous chat submission unless the user does not take the minimum steps required to protect their instance.</p> <p>User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads.</p> <p>Given the minimum requirement for a user to send a chat is to be given access to a workspace via an admin the risk is low. Additionally, the location in which the XSS renders is only limited to the user who submits the XSS.</p> <p>Ultimately, this attack is limited to the user attacking themselves. There is no anonymous chat submission unless the user does not take the minimum steps required to protect their instance.</p> https://vulnerability.circl.lu/vuln/ghsa-m8mq-5vgv-8w3r https://vulnerability.circl.lu/vuln/gsd-2024-0435 gsd-2024-0435 https://vulnerability.circl.lu/vuln/gsd-2024-0435