Forceu

Gokapi

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-48494

  • EPSS 0.03%
  • Veröffentlicht 02.06.2025 11:15:22
  • Zuletzt bearbeitet 26.08.2025 17:28:27

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. When using end-to-end encryption, a stored cross-site scripting vulnerability can be exploited by uploading a file with JavaScript code embedded in the file...

5.4

CVE-2025-48495

  • EPSS 0.03%
  • Veröffentlicht 02.06.2025 11:08:07
  • Zuletzt bearbeitet 26.08.2025 17:29:01

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. By renaming the friendly name of an API key, an authenticated user could inject JS into the API key overview, which would also be executed when another user...