Approved changes feed: RSS · Atom
cpe:2.3:a:rustfs:console:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rustfs (742894ef-658d-5cdc-8784-77e6e7b0959e) |
|---|---|
| Product | Console (b50ba335-dc96-5f60-9b3e-b929d5725c6f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-62378 |
vulnerable | 2026-07-29 01:06:19.071477 |
RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover
CRITICAL (9)
RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components/object/pdf-viewer.tsx extension-based PDF preview path can render HTML content uploaded as .pdf, allowing stored cross-site scripting in the management console and exposure of administrator AccessKeyId, SecretAccessKey, and SessionToken values. This is caused by a regression of CVE-2026-27822. This vulnerability is fixed in 0.1.10.
Published: 2026-07-15T16:50:13.127Z
Updated: 2026-07-16T19:19:40.699Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.