Lucene search
SnykCVELIST:CVE-2019-10771HistoryNov 25, 2019 - 10:39 p.m.
CVE-2019-10771
2019-11-2522:39:39
snyk
www.cve.org
1
0.001 Low
EPSS
Percentile
33.8%
Characters in the GET url path are not properly escaped and can be reflected in the server response.
CNA Affected
[
{
"product": "iobroker.web",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions prior to version 2.4.10"
}
]
}
]References
Related
nodejs
nodejs
Cross-Site Scripting
2019-11-27 15:14:50
cve
cve
CVE-2019-10771
2019-11-25 23:15:10
githubexploit
githubexploit
Exploit for Cross-site Scripting in Iobroker Iobroker.Web
2020-12-01 09:18:57
github
github
Cross-Site Scripting in iobroker.web
2019-12-02 18:14:30
veracode
veracode
Cross-site Scripting (XSS)
2019-11-27 08:45:38
osv
osv
Cross-Site Scripting in iobroker.web
2019-12-02 18:14:30
prion
prion
Design/Logic Flaw
2019-11-25 23:15:00
nvd
nvd
CVE-2019-10771
2019-11-25 23:15:10