Описание
Cross-Site Scripting in gitbook
Affected versions of gitbook do not properly sanitize user input outside of backticks, which may result in cross-site scripting in the online reader.
Recommendation
Update to version 3.2.2 or later.
Пакеты
Наименование
gitbook
npm
Затронутые версииВерсия исправления
< 3.2.2
3.2.2
Связанные уязвимости
CVSS3: 6.1
nvd
больше 7 лет назад
GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc). Stored Cross-Site-Scripting (XSS) is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader.