Dutchcoders

CVE-2022-40931 Sep 29, 16:15 Go MEDIUM POC PATCH This Month

dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2021-33497 May 24, 05:15 Go CRITICAL PATCH Act Now

Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

CVE-2021-33496 May 24, 05:15 Go MEDIUM PATCH This Month

Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.