Cross-Site Scripting (XSS)

Overview

In docsify before version 4.12.0 it is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods:

• When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking place in the sidebar.
• The isURL external check can be bypassed by inserting more “////” characters.

Recommendation

Upgrade to version 4.12.0 or later

References

• Snyk Advisory
• GitHub Advisory
• CVE