Junglewise Threat Intelligence

CVE-2022-46165: syncthing vulnerable to Cross-site Scripting (XSS) in Web GUI

CVE-2022-46165 · Severity: low · CVSS 3.1 · Published 2023-06-06

Technologies: github.com/syncthing/syncthing (Go). Vendors: Go.

Executive brief

syncthing vulnerable to Cross-site Scripting (XSS) in Web GUI

Affected products

Go github.com/syncthing/syncthing

Related threats

GO-2022-0888 - Crash due to malformed relay protocol message in github.com/syncthing/syncthing
Syncthing vulnerable to symlink traversal and arbitrary file overwrite