[GH-ISSUE #340] Fixed XSS during file upload time #269

New issue

Closed

opened 2026-02-25 21:31:34 +03:00 by kerem · 3 comments

kerem commented

2026-02-25 21:31:34 +03:00

Owner

Originally created by @B3EF on GitHub (Mar 8, 2021).
Original GitHub issue: https://github.com/ciur/papermerge/issues/340

Originally assigned to: @ciur on GitHub.

the rendering of file name during the file upload time has caused an xss.
i have fixed it in your papermerge-js repo please refer this
https://github.com/418sec/papermerge-js

Originally created by @B3EF on GitHub (Mar 8, 2021). Original GitHub issue: https://github.com/ciur/papermerge/issues/340 Originally assigned to: @ciur on GitHub. the rendering of file name during the file upload time has caused an xss. i have fixed it in your papermerge-js repo please refer this https://github.com/418sec/papermerge-js

kerem

2026-02-25 21:31:34 +03:00

closed this issue
added the
bug

security

medium impact
labels

kerem commented

2026-02-25 21:31:35 +03:00

Author

Owner

@ciur commented on GitHub (Mar 8, 2021):

@BEFF, thanks for pull request, I will take care !

@ciur commented on GitHub (Mar 8, 2021): @BEFF, thanks for pull request, I will take care !

kerem commented

2026-02-25 21:31:35 +03:00

Author

Owner

@B3EF commented on GitHub (Mar 19, 2021):

Hi @ciur any updates?

@B3EF commented on GitHub (Mar 19, 2021): Hi @ciur any updates?

kerem commented

2026-02-25 21:31:35 +03:00

Author

Owner

@ciur commented on GitHub (Mar 20, 2021):

See my comment here.
Fixed as part of the issue #338.

@ciur commented on GitHub (Mar 20, 2021): See my comment [here](https://github.com/ciur/papermerge-js/pull/13#issuecomment-803257845). [Fixed](https://github.com/ciur/papermerge-js/commit/88adef6d4d102fcd31c8a270c87a3bba563a1a7a) as part of the issue #338.