Lucene search

CVE-2020-8127

🗓️ 28 Feb 2020 20:11:15Reported by [email protected]Type

Insufficient validation in reveal.js for cross-origin communication allows for cross-site scripting attack

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
cvelist	CVE-2020-8127	28 Feb 202019:25	–	cvelist
nodejs	Cross-Site Scripting	10 May 202118:51	–	nodejs
osv	CVE-2020-8127	28 Feb 202020:15	–	osv
osv	Cross-site Scripting in reveal.js	10 May 202118:47	–	osv
prion	Cross site scripting	28 Feb 202020:15	–	prion
github	Cross-site Scripting in reveal.js	10 May 202118:47	–	github
hackerone	Node.js third-party modules: [reveal.js] XSS by calling arbitrary method via postMessage	10 Sep 201918:29	–	hackerone
veracode	Cross-Site Scripting (XSS)	19 Feb 202002:15	–	veracode
cve	CVE-2020-8127	28 Feb 202020:15	–	cve

Nvd

Node

revealjs reveal.jsRange≤3.9.1node.js

Source	Link
hackerone	www.hackerone.com/reports/691977

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Feb 2020 20:15Current

6Medium risk

Vulners AI Score6

CVSS24.3

CVSS36.1

EPSS0.00354

CWE-79