copyparty vulnerabilities (PyPI)
15 vulnerabilities.
-
copypartyPyPI copyparty FTP: upload outside defined volumes (limited path traversal) 5.3 Medium -
copypartyPyPI Copyparty: file/dirkey confusion 4.3 Medium -
copypartyPyPI Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html` 3.7 Low -
copypartyPyPI Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access 2.3 Low -
copypartyPyPI Copyparty volflag `nohtml` did not block javascript in svg files 4.6 Medium -
copypartyPyPI Copyparty vulnerable to eflected cross-site scripting via setck parameter 5.4 Medium -
copypartyPyPI copyparty: Sharing a single file does not fully restrict access to other files in source folder 5.3 Medium -
copypartyPyPI Cross Site Scripting vulnerability in copyparty v.1.9.1 allows a local attacker to execute... 7.8 High -
copypartyPyPI Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page 7.5 High -
copypartyPyPI copyparty Reflected XSS via Filter Parameter 6.3 Medium -
copypartyPyPI copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata 5.4 Medium -
copypartyPyPI copyparty renders unsanitized filenames as HTML when user uploads empty files 3.6 Low -
copypartyPyPI copyparty vulnerable to reflected cross-site scripting via k304 parameter 6.3 Medium -
copypartyPyPI copyparty vulnerable to reflected cross-site scripting via hc parameter 6.3 Medium -
copypartyPyPI Path traversal in copyparty 7.5 High