The wetty terminal application is affected by a high-severity Cross-site Scripting vulnerability that could lead to unauthorized script execution in a user's browser.

This vulnerability is a Cross-site Scripting (CWE-79) flaw where the application fails to properly neutralize user-supplied input. It is an unauthenticated vulnerability, meaning no user interaction is required beyond a victim accessing the malicious link or page.

Successful exploitation allows an attacker to execute malicious scripts within the context of a user session. This can lead to session hijacking, unauthorized actions performed on behalf of the user, or the exfiltration of sensitive information displayed in the terminal interface. With a CVSS score of 8.6, this represents a significant risk to the integrity and confidentiality of browser-based administrative sessions.

Immediate Action: Update the wetty package to version 3.0.4 or later immediately.

Proactive Monitoring: Monitor web server logs for suspicious URL patterns or unexpected script injections targeting the terminal interface.

Compensating Controls: Deploy a Web Application Firewall (WAF) with robust XSS filtering rules to inspect incoming traffic and block malformed requests before they reach the application.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the nature of the application, which provides terminal access, the risk of session compromise is significant. Organizations using wetty must prioritize the update to version 3.0.4 to ensure the security of their remote management sessions.