Lucene search

K
osvGoogleOSV:CVE-2019-12043
HistoryMay 13, 2019 - 2:29 p.m.

CVE-2019-12043

2019-05-1314:29:01
Google
osv.dev
4

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

37.3%

In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

37.3%