CVE-2019-15499

2019-08-2304:15:11

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.

CPENameOperatorVersion
codimdeq1.1.0-ce
codimdeq1.3.0
codimdeq1.3.1
codimdeq1.2.0
codimdeq0.4.2
codimdeq0.3.4
codimdeq0.4.1
codimdeq0.4.0
codimdeq1.0.0-ce
codimdeq0.4.6