> CVE-2025-47929

« BACK_TO_HOME
PUBLISHED
2025-05-15 21:15
MODIFIED
2025-05-16 14:42
EPSS (Prob. Exploit)
0.41%
Top 64.2%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

DumbDrop, a file upload application that provides an interface for dragging and dropping files, has a DOM cross-site scripting vulnerability in the upload functionality prior to commit db27b25372eb9071e63583d8faed2111a2b79f1b. A user could be tricked into uploading a file with a malicious payload. Commit db27b25372eb9071e63583d8faed2111a2b79f1b fixes the vulnerability.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

DumbDrop vulnerable to DOM XSS via file upload

AFFECTED PACKAGES:
Unknown / Unknown
ALIASES:
GHSA-gj32-5mgw-2w27

> HISTORIQUE DES MODIFICATIONS

Première apparition
15/05/2025 21:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:03
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME