CVE-2021-34364

2021-06-0911:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.5%

JSON

The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE: github.com sends Content-Security-Policy headers to, in general, address XSS and other concerns.

CPENameOperatorVersion
refined-githubeq20.4.21
refined-githubeq19.11.8
refined-githubeq19.11.22
refined-githubeq20.12.3
refined-githubeq0.6.0
refined-githubeq19.7.30
refined-githubeq19.6.13.1034
refined-githubeq20.10.29
refined-githubeq19.10.10
refined-githubeq1.12.0

Name	Operator	Version
refined-github	eq	20.4.21
refined-github	eq	19.11.8
refined-github	eq	19.11.22
refined-github	eq	20.12.3
refined-github	eq	0.6.0
refined-github	eq	19.7.30
refined-github	eq	19.6.13.1034
refined-github	eq	20.10.29
refined-github	eq	19.10.10
refined-github	eq	1.12.0