Cross site scripting

2023-02-0404:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

nrel api-umbrella-web

flash message handler

remote attack

version upgrade

patch bcc0e922c61d30367678c8f17a435950969315cd

vulnerability identifier vdb-220060

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.6%

JSON

A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.0 is able to address this issue. The name of the patch is bcc0e922c61d30367678c8f17a435950969315cd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-220060.

CPENameOperatorVersion
api_umbrella_webeq0.7.1

CPE	Name	Operator	Version
	api_umbrella_web	eq	0.7.1

References

github.com/NREL/api-umbrella-web/commit/bcc0e922c61d30367678c8f17a435950969315cd

github.com/NREL/api-umbrella-web/releases/tag/v0.8.0

vuldb.com/?ctiid.220060

vuldb.com/?id.220060