kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/13 | third party advisory |