Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3377

Опубликовано: 05 мар. 2021
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Средний

Описание

The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ansi_up_project:ansi_up:*:*:*:*:*:node.js:*:*
Версия до 5.0.0 (исключая)

EPSS

Процентиль: 98%
0.46141
Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2021-3377

CVSS3: 6.1
ubuntu
почти 5 лет назад

The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0.

redhat логотип

CVE-2021-3377

CVSS3: 6.5
redhat
около 5 лет назад

The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0.

debian логотип

CVE-2021-3377

CVSS3: 6.1
debian
почти 5 лет назад

The npm package ansi_up converts ANSI escape codes into HTML. In ansi_ ...

github логотип

GHSA-2v5f-23xc-v9qr

CVSS3: 6.1
github
почти 5 лет назад

ansi_up cross-site scripting vulnerability

EPSS

Процентиль: 98%
0.46141
Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79