Lucene search
GoogleOSV:GHSA-C6C4-JMQX-3R33HistoryDec 09, 2021 - 7:30 p.m.
Open Redirect in xdLocalStorage
2021-12-0919:30:14
Google
osv.dev
12
0.001 Low
EPSS
Percentile
32.7%
An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the iframe object. Therefore any domain that is currently loaded within the iframe can receive the messages that the client sends.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xdlocalstorage | le | 2.0.5 |
Related
veracode
veracode
Information Disclosure
2020-04-08 08:49:56
prion
prion
Design/Logic Flaw
2020-04-07 18:15:00
cve
cve
CVE-2020-11611
2020-04-07 18:15:13
osv
osv
CVE-2020-11611
2020-04-07 18:15:13
cvelist
cvelist
CVE-2020-11611
2020-04-07 17:18:54
nvd
nvd
CVE-2020-11611
2020-04-07 18:15:13
github
github
Open Redirect in xdLocalStorage
2021-12-09 19:30:14