Lucene search
SnykCVELIST:CVE-2019-10756HistoryOct 08, 2019 - 6:58 p.m.
CVE-2019-10756
2019-10-0818:58:18
snyk
www.cve.org
0.001 Low
EPSS
Percentile
25.0%
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
CNA Affected
[
{
"product": "node-red-dashboard",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions prior to version 2.17.0"
}
]
}
]Related
veracode
veracode
Cross-Site Scripting (XSS)
2019-10-09 03:36:30
osv
osv
CVE-2019-10756
2019-10-08 19:15:09
Cross-site Scripting in node-red-dashboard
2019-10-25 19:41:24
github
github
Cross-site Scripting in node-red-dashboard
2019-10-25 19:41:24
cve
cve
CVE-2019-10756
2019-10-08 19:15:09
prion
prion
Design/Logic Flaw
2019-10-08 19:15:00
nvd
nvd
CVE-2019-10756
2019-10-08 19:15:09