EUVD-2017-0286

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Validator module for Node.js prior to 1.1.0 allows XSS filter bypass via nested strings

Reporter	Title	Published	Views	Family All 21
Circl	CVE-2013-7454	24 Oct 201718:33	–	circl
CNVD	Joyent Node.js validator security bypass vulnerability (CNVD-2016-02546)	24 Apr 201600:00	–	cnvd
CVE	CVE-2013-7454	23 Jan 201721:00	–	cve
Cvelist	CVE-2013-7454	23 Jan 201721:00	–	cvelist
Debian CVE	CVE-2013-7454	23 Jan 201721:00	–	debiancve
F5 Networks	K30110324: Multiple Node.js vulnerabilities	21 Feb 202318:55	–	f5
Github Security Blog	Multiple XSS Filter Bypasses in validator	24 Oct 201718:33	–	github
Node.js	Multiple XSS Filter Bypasses	17 Oct 201519:41	–	nodejs
NVD	CVE-2013-7454	23 Jan 201721:59	–	nvd
OSV	GHSA-Q4QQ-FM7Q-CWP5 Multiple XSS Filter Bypasses in validator	24 Oct 201718:33	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "06efac26-a015-30db-bbe7-a1f819cb2876",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5259366e-9b6e-38aa-8f9c-225e3ec3a975",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-7454
github	www.github.com/advisories/GHSA-q4qq-fm7q-cwp5
nealpoole	www.nealpoole.com/blog/2013/07/xss-filter-bypass-in-validator-nodejs-module
npmjs	www.npmjs.com/advisories/41
blog	www.blog.kotowicz.net/2012/07/codeigniter-210-xssclean-cross-site.html
openwall	www.openwall.com/lists/oss-security/2016/04/20/11
suse	www.suse.com/security/cve/CVE-2013-7454.html
nodesecurity	www.nodesecurity.io/advisories/41
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.1

CVSS 24.3

EPSS0.00482