CVE-2014-10065

2018-04-2600:00:00

CWE-94

hackerone

www.cve.org

0.001 Low

EPSS

Percentile

38.7%

JSON

Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url’s to be injected into the rendered content.

CNA Affected

[
  {
    "product": "remarkable node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "<1.4.1"
      }
    ]
  }
]

References

github.com/jonschlinkert/remarkable/issues/97

nodesecurity.io/advisories/30

0.001 Low

EPSS

Percentile

38.7%

JSON

Related for CVELIST:CVE-2014-10065