CVE-2018-16481

Опубликовано: 01 фев. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.

Ссылки

https://hackerone.com/reports/330356
Exploit
Issue Tracking
Third Party Advisory
https://hackerone.com/reports/330356
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:html-pages_project:html-pages:*:*:*:*:*:node.js:*:*

Версия до 2.1.1 (включая)

EPSS

Процентиль: 36%

0.0015

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-5p26-hw7f-3cpr