CERT24GHSA-jj9r-xgj6-prvj: Stored XSS in openEQUELLALoading data…
CERT24Threat Observatory
Period

GHSA-jj9r-xgj6-prvj: Stored XSS in openEQUELLA

Before openEQUELLA 2026.1, the pre-login notice image upload endpoint does not validate the type of uploaded files and serves them with a Content-Type derived from the supplied filename. A user with the EDIT_SYSTEM_SETTINGS permission can upload an HTML file that is served as text/html from the openEQUELLA origin, resulting in stored cross-site scripting (XSS).

← Back to intelligence

GHSA-jj9r-xgj6-prvj: Stored XSS in openEQUELLA

Before openEQUELLA 2026.1, the pre-login notice image upload endpoint does not validate the type of uploaded files and serves them with a Content-Type derived from the supplied filename. A user with the EDIT_SYSTEM_SETTINGS permission can upload an HTML file that is served as text/html from the openEQUELLA origin, resulting in stored cross-site scripting (XSS).