Lucene search
GoogleOSV:GHSA-M52X-29PQ-W3VVHistoryNov 22, 2019 - 6:18 p.m.
Pannellum Cross-Site Scripting due to data not being sanitized for URIs or vbscript
2019-11-2218:18:03
Google
osv.dev
4
0.001 Low
EPSS
Percentile
36.1%
Versions of pannellum prior to 2.5.6 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize URLs for data URIs, which may allow attackers to execute arbitrary code in a victim’s browser.
Recommendation
Upgrade to version 2.5.6 or later.
Related
cve
cve
CVE-2019-16763
2019-11-22 19:15:12
prion
prion
Cross site request forgery (csrf)
2019-11-22 19:15:00
osv
osv
CVE-2019-16763
2019-11-22 19:15:12
github
github
nodejs
nodejs
Cross-Site Scripting
2019-11-29 17:39:48
cvelist
cvelist
CVE-2019-16763 XSS in Pannellum from 2.5.0 through 2.5.4
2019-11-22 18:26:09
veracode
veracode
Cross-Site Scripting (XSS)
2019-11-25 01:42:46
nvd
nvd
CVE-2019-16763
2019-11-22 19:15:12
githubexploit
githubexploit
Exploit for Cross-site Scripting in Pannellum
2020-12-01 09:18:58