exploitDog

CVE-2017-1000491

Опубликовано: 03 янв. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.

Ссылки

https://github.com/rhysd/Shiba/commit/e8a65b0f81eb04903eedd29500d7e1bedf249eab
Patch
Third Party Advisory
https://github.com/rhysd/Shiba/issues/42
Issue Tracking
Third Party Advisory
https://github.com/rhysd/Shiba/commit/e8a65b0f81eb04903eedd29500d7e1bedf249eab
Patch
Third Party Advisory
https://github.com/rhysd/Shiba/issues/42
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:shiba_project:shiba:1.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00369

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-jr64-pggr-j8xj

CVSS3: 6.1

github

больше 3 лет назад

Shiba vulnerable to XSS leading to code execution

EPSS

Процентиль: 58%

0.00369

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79