CVE-2017-1000491

2018-01-0301:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

27.1%

JSON

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.

CPENameOperatorVersion
shibaeq1.1.0
shibaeq0.9.0
shibaeq0.6.0
shibaeq0.1.0
shibaeq0.10.1
shibaeq1.0.0
shibaeq0.6.1
shibaeq0.3.0
shibaeq0.4.0
shibaeq1.0.4

Name	Operator	Version
shiba	eq	1.1.0
shiba	eq	0.9.0
shiba	eq	0.6.0
shiba	eq	0.1.0
shiba	eq	0.10.1
shiba	eq	1.0.0
shiba	eq	0.6.1
shiba	eq	0.3.0
shiba	eq	0.4.0
shiba	eq	1.0.4

References

github.com/rhysd/Shiba/commit/e8a65b0f81eb04903eedd29500d7e1bedf249eab

github.com/rhysd/Shiba/issues/42

0.001 Low

EPSS

Percentile

27.1%

JSON

Related for OSV:CVE-2017-1000491