Lucene search

K
osvGoogleOSV:CVE-2019-12184
HistoryMay 19, 2019 - 7:29 p.m.

CVE-2019-12184

2019-05-1919:29:00
Google
osv.dev
4

EPSS

0.001

Percentile

24.8%

There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136.

EPSS

0.001

Percentile

24.8%

Related for OSV:CVE-2019-12184