CVE-2026-28683 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, if a malicious authenticated user uploads…
High CVSS: 8.7

CVE-2026-28683

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, if a malicious authenticated user uploads SVG and creates a hotlink for it, they can achieve stored XSS. This issue has been patched in version 2.2.3.
Vendor
Forceu
Product
Gokapi
CWE
CWE-79
Yayın Tarihi
2026-03-06 05:16:38
Güncelleme
2026-03-09 18:52:48
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Gokapi HIGH Forceu 2026

Referanslar

https://github.com/Forceu/Gokapi/releases/tag/v2.2.3 https://github.com/Forceu/Gokapi/security/advisories/GHSA-3c22-5j5m-4jq7