CyberRota Analysis
AI-GeneratedA stored cross-site scripting (XSS) vulnerability exists in the web interface of the affected Java product, allowing attackers to inject malicious JavaScript by uploading files with specially crafted filenames. This flaw can lead to unauthorized script execution in the browsers of users accessing the file listing, potentially compromising user data and session integrity. Organizations utilizing versions up to 1.3.7 of the affected software should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters.