Lucene search
GoogleOSV:CVE-2021-43861HistoryDec 30, 2021 - 2:15 p.m.
CVE-2021-43861
2021-12-3014:15:07
Google
osv.dev
3
Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Prior to version 8.13.8, malicious diagrams can run javascript code at diagram readers’ machines. Users should upgrade to version 8.13.8 to receive a patch. There are no known workarounds aside from upgrading.
Related
ubuntucve
ubuntucve
CVE-2021-43861
2021-12-30 00:00:00
cve
cve
CVE-2021-43861
2021-12-30 14:15:07
debiancve
debiancve
CVE-2021-43861
2021-12-30 14:15:07
nvd
nvd
CVE-2021-43861
2021-12-30 14:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-01-07 06:54:22
osv
osv
Incorrect sanitisation function leads to `XSS` in mermaid
2022-01-06 19:45:59
prion
prion
Design/Logic Flaw
2021-12-30 14:15:00
github
github
Incorrect sanitisation function leads to `XSS` in mermaid
2022-01-06 19:45:59
cvelist
cvelist
CVE-2021-43861 Incorrect sanitisation function leads to `XSS`
2021-12-30 13:40:11