Lucene search
Max SchaeferNODEJS:1418HistoryNov 29, 2019 - 5:39 p.m.
Cross-Site Scripting
2019-11-2917:39:48
Max Schaefer
www.npmjs.com
9
0.001 Low
EPSS
Percentile
36.1%
Overview
Versions of pannellum prior to 2.5.6 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize URLs for data URIs, which may allow attackers to execute arbitrary code in a victim’s browser.
Recommendation
Upgrade to version 2.5.6 or later.
References
Related
cve
cve
CVE-2019-16763
2019-11-22 19:15:12
osv
osv
Pannellum Cross-Site Scripting due to data not being sanitized for URIs or vbscript
2019-11-22 18:18:03
CVE-2019-16763
2019-11-22 19:15:12
github
github
cvelist
cvelist
CVE-2019-16763 XSS in Pannellum from 2.5.0 through 2.5.4
2019-11-22 18:26:09
prion
prion
Cross site request forgery (csrf)
2019-11-22 19:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-11-25 01:42:46
nvd
nvd
CVE-2019-16763
2019-11-22 19:15:12
githubexploit
githubexploit
Exploit for Cross-site Scripting in Pannellum
2020-12-01 09:18:58