CVE-2018-12104

2018-06-1720:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

47.2%

JSON

Cross-site scripting (XSS) vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/new_report.kp URI.

CPENameOperatorVersion
knowledge-repoeq0.6.2
knowledge-repoeq0.6.4
knowledge-repoeq0.7.1
knowledge-repoeq0.7.3
knowledge-repoeq0.6.0
knowledge-repoeq0.7.0
knowledge-repoeq0.6.10
knowledge-repoeq0.6.6
knowledge-repoeq0.6.3
knowledge-repoeq0.7.2

Name	Operator	Version
knowledge-repo	eq	0.6.2
knowledge-repo	eq	0.6.4
knowledge-repo	eq	0.7.1
knowledge-repo	eq	0.7.3
knowledge-repo	eq	0.6.0
knowledge-repo	eq	0.7.0
knowledge-repo	eq	0.6.10
knowledge-repo	eq	0.6.6
knowledge-repo	eq	0.6.3
knowledge-repo	eq	0.7.2