id: GO-2022-0924
modules:
    - module: github.com/dutchcoders/transfer.sh
      versions:
        - fixed: 1.2.4
      vulnerable_at: 1.2.3
summary: Cross-site scripting in Dutchcoders transfer.sh in github.com/dutchcoders/transfer.sh
cves:
    - CVE-2021-33496
ghsas:
    - GHSA-w3jx-wv97-67ph
references:
    - advisory: https://github.com/advisories/GHSA-w3jx-wv97-67ph
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2021-33496
    - fix: https://github.com/dutchcoders/transfer.sh/commit/9df18fdc69de2e71f30d8c1e6bfab2fda2e52eb4
    - fix: https://github.com/dutchcoders/transfer.sh/pull/373
    - web: https://github.com/dutchcoders/transfer.sh/releases/tag/v1.2.4
    - web: https://vuln.ryotak.me/advisories/43
source:
    id: GHSA-w3jx-wv97-67ph
    created: 2024-08-20T14:30:59.729201-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE