Lucene search

CVE-2020-28470

🗓️ 14 Jan 2021 10:13:15Reported by [email protected]Type

Package @scullyio/scully affected by CVE-2020-28470 with insecure state transfer

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Veracode	Cross-Site Scripting (XSS)	15 Jan 202105:30	–	veracode
OSV	Cross-site Scripting (XSS) in @scullyio/scully	13 Apr 202115:28	–	osv
Cvelist	CVE-2020-28470 Cross-site Scripting (XSS)	14 Jan 202109:35	–	cvelist
Prion	Design/Logic Flaw	14 Jan 202110:15	–	prion
CVE	CVE-2020-28470	14 Jan 202110:15	–	cve
Github Security Blog	Cross-site Scripting (XSS) in @scullyio/scully	13 Apr 202115:28	–	github

Nvd

Node

scully scullyRange<1.0.9

Source	Link
snyk	www.snyk.io/vuln/SNYK-JS-SCULLYIOSCULLY-1055829
github	www.github.com/scullyio/scully/pull/1182

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Jan 2021 10:15Current

7.1High risk

Vulners AI Score7.1

CVSS24.3

CVSS36.1

EPSS0.003

CWE-79

package security vulnerability json.stringify html