Lucene search
GoogleOSV:GHSA-XG59-M7WX-853QHistoryOct 25, 2019 - 7:41 p.m.
Cross-site Scripting in node-red-dashboard
2019-10-2519:41:24
Google
osv.dev
9
0.001 Low
EPSS
Percentile
25.0%
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-red-dashboard | lt | 2.17.0 |
Related
veracode
veracode
Cross-Site Scripting (XSS)
2019-10-09 03:36:30
osv
osv
CVE-2019-10756
2019-10-08 19:15:09
github
github
Cross-site Scripting in node-red-dashboard
2019-10-25 19:41:24
cve
cve
CVE-2019-10756
2019-10-08 19:15:09
prion
prion
Design/Logic Flaw
2019-10-08 19:15:00
cvelist
cvelist
CVE-2019-10756
2019-10-08 18:58:18
nvd
nvd
CVE-2019-10756
2019-10-08 19:15:09