Lucene search
HistoryJul 25, 2022 - 2:15 p.m.
CVE-2020-28455
vulnerability; markdown-it-toc; header contents
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
40.2%
This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are not escaped.
Affected configurations
Node
markdown-it-toc_projectmarkdown-it-tocnode.js
| Vendor | Product | Version | CPE |
|---|---|---|---|
| markdown-it-toc_project | markdown-it-toc | * | cpe:2.3:a:markdown-it-toc_project:markdown-it-toc:*:*:*:*:*:node.js:*:* |
Related
veracode
veracode
Cross-site Scripting (XSS)
2022-07-26 07:40:00
cvelist
cvelist
CVE-2020-28455 Cross-site Scripting (XSS)
2022-07-25 14:10:37
github
github
cve
cve
CVE-2020-28455
2022-07-25 14:15:09
osv
osv
prion
prion
Code injection
2022-07-25 14:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
40.2%
Related for NVD:CVE-2020-28455