Security Advisory
CVE-2018-13408
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges.