Vulnerabilities > Glance Project > Glance > 3.0.5

DATE CVE VULNERABILITY TITLE RISK
2023-02-13 CVE-2022-25937 Path Traversal vulnerability in Glance Project Glance
Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root directory.
network
low complexity
glance-project CWE-22
6.5
6.5
2018-07-03 CVE-2018-3748 Cross-site Scripting vulnerability in Glance Project Glance 3.0.5
There is a Stored XSS vulnerability in the glance node module versions <= 3.0.5.
network
low complexity
glance-project CWE-79
6.1
6.1