Количество 2
Количество 2
CVE-2019-10756
почти 7 лет назад
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
CVSS3: 5.4
EPSS: Низкий
GHSA-xg59-m7wx-853q
почти 7 лет назад
Cross-site Scripting in node-red-dashboard
CVSS3: 5.4
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-10756 It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default. | CVSS3: 5.4 | 1% Низкий | почти 7 лет назад |
| GHSA-xg59-m7wx-853q Cross-site Scripting in node-red-dashboard | CVSS3: 5.4 | 1% Низкий | почти 7 лет назад |
Уязвимостей на страницу
20