Junglewise Threat Intelligence

Reflected XSS in Gotify's /docs via import of outdated Swagger UI

Severity: info · Published 2023-01-10

Technologies: github.com/gotify/server (Go). Vendors: Go.

Executive brief

Reflected XSS in Gotify's /docs via import of outdated Swagger UI

Affected products

Go github.com/gotify/server

Related threats

GO-2022-1208 - gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
GO-2023-1471 - Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server