Lucene search

K
osvGoogleOSV:GHSA-5H7X-68WJ-JHWC
HistoryMay 24, 2022 - 5:46 p.m.

Docsify vulnerable to cross-site scripting due to mishandled encoding

2022-05-2417:46:27
Google
osv.dev
2

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

docsify versions 4.12.1 and earlier are vulnerable to cross-site scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.

CPENameOperatorVersion
docsifylt4.12.2

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

Related for OSV:GHSA-5H7X-68WJ-JHWC