Lucene search

K
cvelistMitreCVELIST:CVE-2019-12184
HistoryMay 19, 2019 - 7:00 p.m.

CVE-2019-12184

2019-05-1919:00:19
mitre
www.cve.org
2

EPSS

0.001

Percentile

24.8%

There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136.

EPSS

0.001

Percentile

24.8%

Related for CVELIST:CVE-2019-12184