Cross-Site Scripting in @risingstack/protect

🗓️ 25 Apr 2018 14:43:30Reported by GitHub Advisory DatabaseType

Vulnerability in @risingstack/protect to Cross-Site Scripting attacks. No fix available. Consider using alternative software.

Reporter	Title	Published	Views	Family All 7
OSV	CVE-2018-1000160	18 Apr 201819:29	–	osv
OSV	Cross-Site Scripting in @risingstack/protect	25 Apr 201814:30	–	osv
NVD	CVE-2018-1000160	18 Apr 201819:29	–	nvd
Prion	Cross site scripting	18 Apr 201819:29	–	prion
Veracode	Cross-Site Scripting (XSS)	19 Apr 201806:10	–	veracode
CVE	CVE-2018-1000160	18 Apr 201819:29	–	cve
Cvelist	CVE-2018-1000160	18 Apr 201819:00	–	cvelist

Vulners

Node

risingstack protectRange≤1.2.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1000160
github	www.github.com/RisingStack/protect/issues/16
github	www.github.com/advisories/GHSA-vpch-rxw3-fgx8
snyk	www.snyk.io/vuln/SNYK-JS-RISINGSTACKPROTECT-455402
npmjs	www.npmjs.com/advisories/1116
github	www.github.com/RisingStack/protect/blob/60b0c91e86686d34e5202419ce9ae7e8dc08edcd/lib/rules/xss.js
embed	www.embed.plnkr.co/xHbhB29JWWyMUMeHsLrm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo