Lucene search

K
osvGoogleOSV:CVE-2020-8823
HistoryFeb 10, 2020 - 3:15 a.m.

CVE-2020-8823

2020-02-1003:15:10
Google
osv.dev
5

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%