Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2016-10537

больше 8 лет назад

backbone is a module that adds in structure to a JavaScript heavy application through key-value pairs and custom events connecting to your RESTful API through JSON There exists a potential Cross Site Scripting vulnerability in the `Model#Escape` function of backbone 0.3.3 and earlier, if a user is able to supply input. This is due to the regex that's replacing things to miss the conversion of things such as `<` to `<`.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2016-10537

больше 8 лет назад

backbone is a module that adds in structure to a JavaScript heavy application through key-value pairs and custom events connecting to your RESTful API through JSON There exists a potential Cross Site Scripting vulnerability in the `Model#Escape` function of backbone 0.3.3 and earlier, if a user is able to supply input. This is due to the regex that's replacing things to miss the conversion of things such as `<` to `<`.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2016-10537

больше 8 лет назад

backbone is a module that adds in structure to a JavaScript heavy appl ...

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-j6p2-cx3w-6jcp

больше 7 лет назад

Cross-Site Scripting in backbone

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2016-10537

backbone is a module that adds in structure to a JavaScript heavy application through key-value pairs and custom events connecting to your RESTful API through JSON There exists a potential Cross Site Scripting vulnerability in the `Model#Escape` function of backbone 0.3.3 and earlier, if a user is able to supply input. This is due to the regex that's replacing things to miss the conversion of things such as `<` to `<`.

CVSS3: 5.4
1%
Низкий
больше 8 лет назад
nvd логотип
CVE-2016-10537

backbone is a module that adds in structure to a JavaScript heavy application through key-value pairs and custom events connecting to your RESTful API through JSON There exists a potential Cross Site Scripting vulnerability in the `Model#Escape` function of backbone 0.3.3 and earlier, if a user is able to supply input. This is due to the regex that's replacing things to miss the conversion of things such as `<` to `<`.

CVSS3: 5.4
1%
Низкий
больше 8 лет назад
debian логотип
CVE-2016-10537

backbone is a module that adds in structure to a JavaScript heavy appl ...

CVSS3: 5.4
1%
Низкий
больше 8 лет назад
github логотип
GHSA-j6p2-cx3w-6jcp

Cross-Site Scripting in backbone

CVSS3: 5.4
1%
Низкий
больше 7 лет назад

Уязвимостей на страницу