https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:25:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-218617 EUVD-2026-218617 https://cve.radiocsirt.org/vuln/euvd-2026-218617 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27088 <p>oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing attacks on a trusted domain, posing a moderate risk to all users. It&#39;s possible to inject html elements, including scripts through the folder-list template. The affected template allows users to interact with the URL path provided by the `Request.URL.Path` variable, which is then rendered directly into the HTML without proper sanitization or escaping. This can be abused by attackers who craft a malicious URL containing injected HTML or JavaScript. When users visit such a URL, the malicious script will be executed in the user&#39;s context. This issue has been addressed in version 4.18.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing attacks on a trusted domain, posing a moderate risk to all users. It&#39;s possible to inject html elements, including scripts through the folder-list template. The affected template allows users to interact with the URL path provided by the `Request.URL.Path` variable, which is then rendered directly into the HTML without proper sanitization or escaping. This can be abused by attackers who craft a malicious URL containing injected HTML or JavaScript. When users visit such a URL, the malicious script will be executed in the user&#39;s context. This issue has been addressed in version 4.18.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27088 https://cve.radiocsirt.org/vuln/ghsa-pp9m-qf39-hxjc <p><strong>Affected:</strong> Go: github.com/oxyno-zeta/s3-proxy/cmd/s3-proxy</p> <p>### Summary A Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing attacks on a trusted domain, posing a high risk to all users.</p> <p>### Details _Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer._ It&#39;s possible to inject html elements, including scripts through the [folder-list template](https://github.com/oxyno-zeta/s3-proxy/blob/master/templates/folder-list.tpl#L19C21-L19C38). It seems like the `.Request.URL.Path` variable is not escaped.</p> <p>I did some research and found it might be due to the `text/template` import being used in [the template implementation](https://github.com/oxyno-zeta/s3-proxy/blob/master/pkg/s3-proxy/utils/templateutils/template.go#L8), instead of the [safer](https://pkg.go.dev/html/template) `html/template`.</p> <p>### PoC _Complete instructions, including specific configuration details, to reproduce the vulnerability._ Using the [default template configuration](https://oxyno-zeta.github.io/s3-proxy/configuration/structure/#targettemplateconfig), the vulnerability can be reproduced with the following steps.</p> <p>1. Navigate to `https://your-s3-proxy.com/path-not-found` and confirm the page looks as follows: </p> <p>2. Try inserting an HTML element by changing `/path-not-fo…</p> <p><strong>Affected:</strong> Go: github.com/oxyno-zeta/s3-proxy/cmd/s3-proxy</p> <p>### Summary A Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing attacks on a trusted domain, posing a high risk to all users.</p> <p>### Details _Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer._ It&#39;s possible to inject html elements, including scripts through the [folder-list template](https://github.com/oxyno-zeta/s3-proxy/blob/master/templates/folder-list.tpl#L19C21-L19C38). It seems like the `.Request.URL.Path` variable is not escaped.</p> <p>I did some research and found it might be due to the `text/template` import being used in [the template implementation](https://github.com/oxyno-zeta/s3-proxy/blob/master/pkg/s3-proxy/utils/templateutils/template.go#L8), instead of the [safer](https://pkg.go.dev/html/template) `html/template`.</p> <p>### PoC _Complete instructions, including specific configuration details, to reproduce the vulnerability._ Using the [default template configuration](https://oxyno-zeta.github.io/s3-proxy/configuration/structure/#targettemplateconfig), the vulnerability can be reproduced with the following steps.</p> <p>1. Navigate to `https://your-s3-proxy.com/path-not-found` and confirm the page looks as follows: </p> <p>2. Try inserting an HTML element by changing `/path-not-fo…</p> https://cve.radiocsirt.org/vuln/ghsa-pp9m-qf39-hxjc https://cve.radiocsirt.org/vuln/opensuse-su-2025:14889-1 <p>govulncheck-vulndb-0.0.20250312T181707-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250312T181707-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14889-1