CVE-2019-15602: Itwork Fileview

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The fileview package v0.1.6 has inadequate output encoding and escaping, which leads to a stored Cross-Site Scripting (XSS) vulnerability in files it serves.

Affected products

• Itwork Fileview: version 0.1.6 only

Published 2020-01-06. Last modified 2026-06-17.