Threats tagged 'ghsa-5xc3-wrr6-467w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.5	CVE-2026-127084Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated High8.52026-11-13GCVE DatabaseCVE-2026-127084 Teable versions before 2026-10-12T12-45-53Z.3331 contain a stored cross-site scripting (XSS) vulnerability. Authenticated users can upload SVG or HTML attachments with attacker-chosen content types, enabling script execution in the context of the victim's session. This vulnerability allows attackers to perform API actions via the same-origin /api/attachments/read URL, which is served inline with an empty Content-Security-Policy. Report on CVE-2026-127084 Vulnerability CWE-79 #ghsa-5xc3-wrr6-467w	GCVE Database	2026-11-13

Page 1 of 1