GHSA-2x5v-3qcr-cj3f
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r2/query endpoints.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: August 11, 2025 6:32 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.