exploitDog

CVE-2017-0931

Опубликовано: 04 июн. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

Ссылки

https://github.com/guardian/html-janitor/issues/34
Exploit
Third Party Advisory
https://hackerone.com/reports/308155
Exploit
Issue Tracking
Third Party Advisory
https://github.com/guardian/html-janitor/issues/34
Exploit
Third Party Advisory
https://hackerone.com/reports/308155
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:html-janitor_project:html-janitor:2.0.2:*:*:*:*:node.js:*:*

EPSS

Процентиль: 44%

0.0022

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-hfj4-96f7-6r5g

CVSS3: 6.1

github

около 7 лет назад

Cross-Site Scripting in html-janitor

EPSS

Процентиль: 44%

0.0022

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

CWE-79