Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "0.9"
},
{
"introduced": "0"
},
{
"last_affected": "0.9.1"
},
{
"introduced": "0"
},
{
"last_affected": "0.10"
},
{
"introduced": "0"
},
{
"last_affected": "0.11"
},
{
"introduced": "0"
},
{
"last_affected": "0.12"
},
{
"introduced": "0"
},
{
"last_affected": "0.12.1"
},
{
"introduced": "0"
},
{
"last_affected": "0.13"
},
{
"introduced": "0"
},
{
"last_affected": "0.14"
},
{
"introduced": "0"
},
{
"last_affected": "0.15"
},
{
"introduced": "0"
},
{
"last_affected": "0.15.1"
},
{
"introduced": "0"
},
{
"last_affected": "0.16"
},
{
"introduced": "0"
},
{
"last_affected": "0.17"
},
{
"introduced": "0"
},
{
"last_affected": "0.18"
},
{
"introduced": "0"
},
{
"last_affected": "0.18.1"
},
{
"introduced": "0"
},
{
"last_affected": "0.18.2"
}
]
}