Lucene search
K

Cross-Site Scripting

🗓️ 05 Sep 2019 21:42:41Reported by Cameron LonsdaleType 
nodejs
 nodejs
🔗 www.npmjs.com👁 18 Views

All versions of `status-board` are vulnerable to Cross-Site Scripting. The `renderDashboard()` function concatenates the `safeDashboard` variable to the printed error message with insufficient sanitization. If this variable is controlled by user input it allows attackers to execute arbitrary JavaScript in a victim's browser. No fix is currently available. Consider using an alternative package until a fix is made available

Related
Detection
ReporterTitlePublishedViews
Family
CNVD
Status Board Cross-Site Scripting Vulnerability
27 Aug 201900:00
cnvd
CVE
CVE-2019-15479
26 Aug 201913:49
cve
Cvelist
CVE-2019-15479
26 Aug 201913:49
cvelist
EUVD
EUVD-2019-0659
7 Oct 202500:30
euvd
Github Security Blog
Status Board vulnerable to Cross-Site Scripting before v1.1.82
23 Sep 201918:32
github
NVD
CVE-2019-15479
26 Aug 201914:15
nvd
OSV
GHSA-8864-RHMW-5M6F Status Board vulnerable to Cross-Site Scripting before v1.1.82
23 Sep 201918:32
osv
Prion
Cross site scripting
26 Aug 201914:15
prion
RedhatCVE
CVE-2019-15479
22 May 202508:22
redhatcve
Veracode
Cross-Site Scripting (XSS)
27 Aug 201903:35
veracode
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation