Lucene search
GoogleOSV:GHSA-P3RP-VMJ9-GV6VHistoryJan 06, 2022 - 7:45 p.m.
Incorrect sanitisation function leads to `XSS` in mermaid
2022-01-0619:45:59
Google
osv.dev
7
0.001 Low
EPSS
Percentile
24.8%
Impact
Malicious diagrams can contain javascript code that can be run at diagram readers machines.
Patches
The users should upgrade to version 8.13.8
Workarounds
You need to upgrade in order to avoid this issue.
Related
ubuntucve
ubuntucve
CVE-2021-43861
2021-12-30 00:00:00
cve
cve
CVE-2021-43861
2021-12-30 14:15:07
debiancve
debiancve
CVE-2021-43861
2021-12-30 14:15:07
nvd
nvd
CVE-2021-43861
2021-12-30 14:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-01-07 06:54:22
prion
prion
Design/Logic Flaw
2021-12-30 14:15:00
osv
osv
CVE-2021-43861
2021-12-30 14:15:07
github
github
Incorrect sanitisation function leads to `XSS` in mermaid
2022-01-06 19:45:59
cvelist
cvelist
CVE-2021-43861 Incorrect sanitisation function leads to `XSS`
2021-12-30 13:40:11