Threats tagged 'ghsa-3hxm-mrvc-44mw'

OpsTree REMS versions through 1.0.0 have a stored cross-site scripting (XSS) vulnerability. Authenticated attackers can exploit this by uploading attachments with a spoofed text/html Content-Type, such as HTML files disguised with double extensions (e.g., test.html.pdf). When these files are previewed in the REMS application, the embedded JavaScript executes in the context of the victim's browser.