Lucene search

K
osvGoogleOSV:GHSA-36M4-6V6M-4VPR
HistoryMay 29, 2019 - 6:04 p.m.

Cross-site Scripting in remarkable

2019-05-2918:04:55
Google
osv.dev
4

EPSS

0.001

Percentile

37.3%

In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL.

EPSS

0.001

Percentile

37.3%