9001 Copyparty 1.9.1
Approved changes feed: RSS · Atom
cpe:2.3:a:9001:copyparty:1.9.1:*:*:*:*:*:*:*
part: a version: 1.9.1 update: *
| Vendor | 9001 (54201781-b3ff-53e3-b635-18d807ee0ad1) |
|---|---|
| Product | Copyparty (5e80af60-3e14-51cf-94f3-720d21eea5df) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/9001/copyparty |
purl2cpe | 2026-06-01 10:17:36.389233 |
pkg:pypi/copyparty |
purl2cpe | 2026-06-01 10:17:36.389235 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41471 |
vulnerable | 2026-06-08 06:11:06.124252 |
Details available
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write access to the server, and they can more simply upload HTML files containing JavaScript.
Published: 2025-08-29T00:00:00.000Z
Updated: 2025-11-03T05:26:40.565Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.