Lucene search

K
osvGoogleOSV:GHSA-589W-HCCM-265X
HistoryOct 19, 2020 - 8:17 p.m.

Inline attribute values were not processed.

2020-10-1920:17:47
Google
osv.dev
8
inline attributes
data processing
xss vulnerability
patches
9.4.4 software

EPSS

0.001

Percentile

29.3%

Impact

Inline attributes have not been processed escape.
If the data that came from users was not processed, then an XSS vulnerability is possible

Patches

Fixed in 9.4.4

EPSS

0.001

Percentile

29.3%

Related for OSV:GHSA-589W-HCCM-265X