Lucene search

K
osvGoogleOSV:GHSA-HH8V-JMH3-9437
HistoryApr 13, 2021 - 3:25 p.m.

Cross-site scripting in SocksJS-node

2021-04-1315:25:33
Google
osv.dev
11

0.001 Low

EPSS

Percentile

46.8%

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

CPENameOperatorVersion
sockjslt0.3.0

0.001 Low

EPSS

Percentile

46.8%

Related for OSV:GHSA-HH8V-JMH3-9437