Lucene search
Abdillah MuhamadNODEJS:741HistoryNov 29, 2018 - 2:39 a.m.
Stored Cross-Site Scripting
2018-11-2902:39:41
Abdillah Muhamad
www.npmjs.com
12
EPSS
0.001
Percentile
42.6%
Overview
All versions of tianma-static are vulnerable to stored cross-site scripting (XSS). The vulnerability is exploitable if a user can control the name of a file that is served by tianma-static
Recommendation
As no fix is available for this vulnerability at this time it is our recommendation to use another static file server.
References
Related
cvelist
cvelist
CVE-2018-16474
2018-11-06 19:00:00
veracode
veracode
Cross-site Scripting (XSS)
2018-11-05 01:42:38
nvd
nvd
CVE-2018-16474
2018-11-06 19:29:00
hackerone
hackerone
Node.js third-party modules: [tianma-static] Stored xss on filename
2018-09-01 02:29:04
Node.js third-party modules: [tianma-static] Security issue with XSS.
2019-06-11 16:08:58
osv
osv
Stored Cross-Site Scripting in tianma-static
2018-11-06 23:12:01
github
github
Stored Cross-Site Scripting in tianma-static
2018-11-06 23:12:01
prion
prion
Cross site scripting
2018-11-06 19:29:00
cve
cve
CVE-2018-16474
2018-11-06 19:29:00